Within the early hours of Monday morning, Managed.com – a significant supplier of managed hosting options – found it was the sufferer of a co-ordinated ransomware assault, encrypting not solely its personal programs but in addition the web sites of consumers.
Inside hours the corporate had decided to take down its complete infrastructure. That has the benefit of that means that no extra injury will be performed by the ransomware in opposition to the web sites and databases of consumers, however has the colossal downside of that means that those self same web sites are not accessible.
As you possibly can in all probability think about, prospects – a few of whom appear to not remember that their hosting supplier has suffered a extreme ransomware assault – are lower than blissful to seek out their web sites are not on-line.
With luck, the technical crew at Managed.com will be capable to restore programs and safe them in opposition to reinfection. Though it’s unclear what number of days or even weeks it might take them to recuperate their prospects’ web sites – time that no on-line enterprise can afford to be with out an internet presence.
However even when Managed.com does recuperate its programs, that isn’t essentially the top of the issue. It’s changing into more and more frequent for ransomware assaults to not simply be about encrypting information, but in addition exfiltrating delicate information and threatening to publish it or promote it on to different cybercriminals if a ransom is just not paid.
In response to Bleeping Laptop, the REvil ransomware gang is currently demanding US $500,000 from Managed.com for a decryption instrument.
Discovered this text attention-grabbing? Follow Graham Cluley on Twitter to learn extra of the unique content material we submit.