AvosLocker Gang Claims Successful Gigabyte Hack
The threat actor that operates the AvosLocker ransomware posted up an announcement, claiming to have hacked hardware manufacturer Gigabyte. The announcement was made on the website run by AvosLocker.
The hacker group behind the AvosLocker ransomware boasted about their alleged successful attack on Gigabyte and even posted up a sampling of files that are reportedly exfiltrated from the Taiwanese hardware maker.
The Avos ransomware gang did not publish any details about the attack, not even when it allegedly hacked Gigabyte, but the file samples that are allegedly stolen from Gigabyte have been examined by security researchers. Experts working with security-focused website PrivacySharks examined and the conclusion was that the files appeared genuine and contain information on Gigabyte partners and employees of the company.
The AvosLocker gang has threatened that it will leak the remainder of the information it claims to have stolen if Gigabyte does not manage to negotiate a ransom agreement.
According to PrivacySharks who examined the leaked files, the partial leak contains personally identifiable information about job applicants and employees, but more importantly - a compressed folder with a non-disclosure agreement and details concerning a deal with networking and storage manufacturer Barracuda Networks. The leaked information also includes what PrivacySharks calls "various data" related to a number of other big companies including Amazon, Intel, Kingston and BestBuy.
While some of the information in the leak dates back to 2014, the most current data in it is as recent as May 2021, which means a chunk of the leak is quite fresh. PrivacySharks raised concerns about the way the hardware manufacturer deals with and stores information, citing the fact that CVs and job application documents were being stored long after the hiring process was over - a practice that is not desirable.
