Subj : RansomHub group says it was behind Christie's attack, threatens t
To   : All
From : TechnologyDaily
Date : Tue May 28 2024 14:00:06

RansomHub group says it was behind Christie's attack, threatens to release 
private data of half a million customers

Date:
Tue, 28 May 2024 12:50:36 +0000

Description:
Hackers couldn't come to an agreement with Christie's auction house, and now 
data is at risk.

FULL STORY
======================================================================

The recent cyberattack at auction house Christies , which took the companys 
website offline hours before a major event, appears to now be confirmed as a 
ransomware incident. 

A hacking collective calling itself RansomHub has claimed responsibility for 
the attack, also saying it stole sensitive information about Christies 
customers. 

The iconic auction house was forced to set up an entirely new website for 
live auctions after its main domain was brought down days before it was 
planning on auctioning roughly $840 million worth of art. Born out of ALPHV 

Now, RansomHub has posted a new thread on a dark web site, assuming 
responsibility for the attack, and claiming it grabbed customer names and 
birth dates. At this moment it is impossible to verify the authenticity of 
the claims, but with RansomHubs history, its possible they are telling the 
truth. 

RansomHub was born out of the disappearance of the ransomware-as-a-service 
known as ALPHV, or BlackCat. 

With a ransomware-as-a-service model, one group builds and maintains the 
malware while others, called affiliates, do the actual breaching and 
encrypting. When affiliates successfully extort money from a victim, they get 
a piece of it, while a piece goes to the developers. When an ALPHV affiliate 
breached Change Healthcare earlier this year, they allegedly successfully 
extorted the healthcare giant for $22 million. However, when it was time to 
split the prize, the developers took all of it and just disappeared, leaving 
the affiliate with roughly 4TB of stolen sensitive data. 

This affiliate was later named RansomHub and it tried, on its own, to extort 
Change Healthcare again. 

In Christie's case, the group said it would release the timer by the end of 
May, since it couldnt come to an agreement with the company. 

Via The New York Times More from TechRadar Pro Christie's website hit by 
major cyberattack hours before huge auction Here's a list of the best 
firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/ransomhub-group-says-it-was-behind-chri
sties-attack-threatens-to-release-private-data-of-half-a-million-customers


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.