iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Taiwan-based Gigabyte has reportedly been hit with a ransomware attack between 3 and 4 August, according to Bleeping Computer and United Daily News reports.
Gigabyte confirmed it contacted law enforcement after it shut down IT infrastructure following a handful of servers in Taiwan being affected.
Extortion gang RansomEXX claimed to have stolen 112GB of sensitive internal data and other information from a code repository. This includes Intel and AMD chip information as well as a debug document. The breach is known to have affected both the Gigabyte support page and parts of the Taiwanese page, according to Bleeping Computer sources.
RansomEXX started in 2018 under the Defray name, but rebranded in 2020. The threat actor has been targeting increasingly high-profile organisations, including the Brazilian government, Texas' Department of Transportation and Ecuador's state-led telecom. It's not believed to be associated with the REvil group that attacked Acer as well as Apple supplier Quanta.
Gigabyte did not comment on whether it would pay the ransom.
[Related: ACSC issues LockBit 2.0 ransomware alert]
Nastasha is a Journalist at Momentum Media, she reports extensively across veterans affairs, cyber security and geopolitics in the Indo-Pacific. She is a co-author of a book titled The Stories Women Journalists Tell, published by Penguin Random House. Previously, she was a Content Producer at Verizon Media, a Digital Producer for Yahoo! and Channel 7, a Digital Journalist at Sky News Australia, as well as a Website Manager and Digital Producer at SBS Australia. Nastasha started her career in media as a Video Producer and Digital News Presenter at News Corp Australia.
Be the first to hear the latest developments in the cyber industry.
