Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft
(2024/01/22)
- Reference: 1705956314
- News link: https://www.theregister.co.uk/2024/01/22/ransomware_aercap_loandepot/
- Source link:
AerCap, the world's largest aircraft leasing company, has reported a ransomware infection that occurred earlier this month, but claims it hasn't yet suffered any financial losses yet and all its systems are under control.
In a US Securities and Exchange Commission (SEC) filing on Monday, the aerospace giant said it had "experienced a cybersecurity incident related to ransomware" on January 17, the [1]report explained:
We promptly took steps to investigate with the support of third-party cybersecurity experts and notified law enforcement. We have full control of all of our IT systems and to date, we have suffered no financial loss related to this incident. Our investigation into this incident, including the extent to which data may have been exfiltrated or otherwise impacted, remains ongoing.
A ransomware crew called Slug has claimed responsibility for the intrusion and listed AerCap as its first public target. According cyberattack analysts at Hackmanac, the criminals claim to have stolen 1TB of data belonging to AerCap.
"As of now, Slug's dark web portal remains bare, revealing no further information about the group," the security firm [2]Xeeted .
AerCap did not respond to The Register 's inquiries. The biz is headquartered in Dublin, and its biggest customer is American Airlines.
[3]Be honest. Would you pay off a ransomware crew?
[4]Fidelity National now says 1.3M customers had data stolen by cyber-crooks
[5]Subway's data torpedoed by LockBit, ransomware gang claims
[6]Russians invade Microsoft exec mail while China jabs at VMware vCenter Server
Also on Monday, LoanDepot updated its Form 8-K filing with the SEC, and now says says crooks stole personal information belonging to millions of people in a ransomware attack earlier this month.
"Although its investigation is ongoing, the company has determined that an unauthorized third party gained access to sensitive personal information of approximately 16.6 million individuals in its systems," the mortgage lender [7]noted .
[8]
LoanDepot said it has hired outside forensics and security experts to investigate the incident, and has made "significant progress in restoring our loan origination and loan servicing systems, including our MyloanDepot and Servicing customer portals."
[9]
LoanDepot [10]disclosed the "cyber incident" in a January 8 SEC filing, noting the it took some IT systems offline due to the intrusion. And while it didn't call the attack ransomware directly, it did say that the incident included "encryption of data." ®
Get our [11]Tech Resources
[1] https://www.sec.gov/Archives/edgar/data/1378789/000095015724000066/form6-k.htm
[2] https://twitter.com/H4ckManac/status/1747854156558172564
[3] https://www.theregister.com/2024/01/10/ransomware_kettle/
[4] https://www.theregister.com/2024/01/10/fidelity_data_disclosure/
[5] https://www.theregister.com/2024/01/22/subways_data_toasted_by_lockbit/
[6] https://www.theregister.com/2024/01/20/chinese_russia_vmware_microsoft/
[7] https://www.sec.gov/Archives/edgar/data/1831631/000183163124000011/pressrelease.htm
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Za9H@xmsAApIVysfyA86BgAAAY8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za9H@xmsAApIVysfyA86BgAAAY8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2024/01/10/fidelity_data_disclosure/
[11] https://whitepapers.theregister.com/
In a US Securities and Exchange Commission (SEC) filing on Monday, the aerospace giant said it had "experienced a cybersecurity incident related to ransomware" on January 17, the [1]report explained:
We promptly took steps to investigate with the support of third-party cybersecurity experts and notified law enforcement. We have full control of all of our IT systems and to date, we have suffered no financial loss related to this incident. Our investigation into this incident, including the extent to which data may have been exfiltrated or otherwise impacted, remains ongoing.
A ransomware crew called Slug has claimed responsibility for the intrusion and listed AerCap as its first public target. According cyberattack analysts at Hackmanac, the criminals claim to have stolen 1TB of data belonging to AerCap.
"As of now, Slug's dark web portal remains bare, revealing no further information about the group," the security firm [2]Xeeted .
AerCap did not respond to The Register 's inquiries. The biz is headquartered in Dublin, and its biggest customer is American Airlines.
[3]Be honest. Would you pay off a ransomware crew?
[4]Fidelity National now says 1.3M customers had data stolen by cyber-crooks
[5]Subway's data torpedoed by LockBit, ransomware gang claims
[6]Russians invade Microsoft exec mail while China jabs at VMware vCenter Server
Also on Monday, LoanDepot updated its Form 8-K filing with the SEC, and now says says crooks stole personal information belonging to millions of people in a ransomware attack earlier this month.
"Although its investigation is ongoing, the company has determined that an unauthorized third party gained access to sensitive personal information of approximately 16.6 million individuals in its systems," the mortgage lender [7]noted .
[8]
LoanDepot said it has hired outside forensics and security experts to investigate the incident, and has made "significant progress in restoring our loan origination and loan servicing systems, including our MyloanDepot and Servicing customer portals."
[9]
LoanDepot [10]disclosed the "cyber incident" in a January 8 SEC filing, noting the it took some IT systems offline due to the intrusion. And while it didn't call the attack ransomware directly, it did say that the incident included "encryption of data." ®
Get our [11]Tech Resources
[1] https://www.sec.gov/Archives/edgar/data/1378789/000095015724000066/form6-k.htm
[2] https://twitter.com/H4ckManac/status/1747854156558172564
[3] https://www.theregister.com/2024/01/10/ransomware_kettle/
[4] https://www.theregister.com/2024/01/10/fidelity_data_disclosure/
[5] https://www.theregister.com/2024/01/22/subways_data_toasted_by_lockbit/
[6] https://www.theregister.com/2024/01/20/chinese_russia_vmware_microsoft/
[7] https://www.sec.gov/Archives/edgar/data/1831631/000183163124000011/pressrelease.htm
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Za9H@xmsAApIVysfyA86BgAAAY8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Za9H@xmsAApIVysfyA86BgAAAY8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2024/01/10/fidelity_data_disclosure/
[11] https://whitepapers.theregister.com/
The Oysters and the Rustacean
fn main() {
let mut oysters = vec![
Oyster { size: OysterSize::Large, state: OysterState::Unaware },
Oyster { size: OysterSize::Medium, state: OysterState::Unaware },
// ... add more oysters of different sizes and states as needed
];
println!("O Oysters,' said the Carpenter,");
println!("You've had a pleasant run!");
println!("Shall we be trotting home again?'");
// Consume the oysters
for oyster in oysters.iter_mut() {
oyster.state = OysterState::Eaten;
}
let remaining_oysters: Vec<&Oyster> = oysters
.iter()
.filter(|oyster| oyster.state == OysterState::Unaware)
.collect();
println!("But answer came there none —");
if remaining_oysters.is_empty() {
println!("And this was scarcely odd, because");
println!("They'd eaten every one.");
}
}
enum OysterState {
Unaware,
Eaten,
// Add more states as needed
}
enum OysterSize {
Small,
Medium,
Large,
// Add more sizes as needed
}
struct Oyster {
size: OysterSize,
state: OysterState,
}