News The operators of rent-seeking IN use ads in Facebook to put pressure on victims

Soldier

Regular
Joined
20.10.20
Messages
88
Reaction score
740
Points
83
Not only do many ransomware operators have their own websites and other resources where they publish data from companies that refused to pay them ransom, but at least one cybercrime group has started using hacked Facebook user accounts to put additional pressure on their victims.

According to journalist Brian Krebs, at the beginning of this week, an ad appeared on Facebook, allegedly launched by The ragnarlocker group. The ad was designed in such a way as to attract the attention of the Italian manufacturer Campari Group, which last week became a victim of extortionate SOFTWARE. As reported in the company's statement on November 6, the possibility of theft of personal and business information by hackers is not excluded.

"This is ridiculous and looks like a big fat lie. We can confirm that confidential data was indeed stolen, and we are talking about a huge amount of data, " the text of the ad on Facebook reads.

According to the ad text, ragnarlocker operators stole 2 TB of information and gave Campari Group until 18: 00 EST on November 10 (2: 00 on November 11 Moscow time) to discuss payment terms in exchange for a promise not to publish the stolen data.

The ad was paid for by the Hodson Event Entertainment page, owned by Chicago-based DJ Chris Hodson. According to Hodson, his account was hacked, and in the hands of the attackers was $500 for advertising. The DJ thought he had enabled two-factor authentication for his Facebook account, but turned out to be wrong.

Hodson looked at the statistics, and as it turned out, about 7150 users viewed the fraudulent ad banner, and 770 of them clicked on the banner.

It is unclear whether the incident is an isolated one. According to comments from Facebook representatives, the company is still investigating the incident.
 
Top Bottom