Ring: ‘No indication of ransomware event’ after CL0P claims attack

Getty Images

Amazon-owned intelligent security organization Ring has denied claims that the ALPHV ransomware group has accessed its units after it threatened to leak knowledge from the company on-line.

ALPHV claimed to be in possession of Ring details on 13 March, but did not make a ransom need on its sufferer blog site.

“There’s often an alternative to let us leak your knowledge,” ALPHV stated, offering no other depth about the alleged attack.

At the time of composing, the group has not produced any additional posts outlining the mother nature of the information and facts, nor a timeframe for its release.

Ring LLC, the household security and wise residence enterprise owned by Amazon, has been ransomed by ALPHV ransomware group.They remaining a uncomplicated information to Ring: “You will find usually the possibility to enable us leak your knowledge”. pic.twitter.com/RfrvpXBgGh

— vx-underground (@vxunderground) March 13, 2023

“We presently have no indications that Ring has experienced a ransomware party,” a Ring spokesperson instructed IT Pro.

Ring doorbells report movie when motion is detected, and while they are commonly made use of for personal residences the enterprise also has a Ring for Organization line to present companies with doorway surveillance.

Ring Footage is encrypted, and proprietors have the possibility to enable end-to-conclusion encryption for online video which restricts accessibility to enrolled cell products via a pass critical.

In 2022 it was uncovered that Ring gave footage from its equipment to law enforcement departments all around the US on 11 individual occasions without having person consent. The business clarified that it did this only in unexpected emergency instances exactly where it judged that it ought to disclose “without the need of hold off”, this kind of as all those in which an individual was struggling with serious physical damage or dying.

What is ALPHV?

The danger group ALPHV, sometimes referred to as BlackCat, initial attained prominence in 2021 as just one of the first ransomware groups applying the Rust programming language, a go that other ransomware gangs these as current FBI targets Hive have because replicated.

Since its launch, the group has claimed the attack on Swissport, a massive cyber attack on Bandai Namco, and the hacking of European energy corporations owned.

Its methodology in boasting the alleged Ring breach is common of the group’s double extortion technique, in which attackers encrypt victims’ details and threaten to publish exfiltrated copies of the information online.

Double extortion ransomware has turn into a rapid favorite amongst risk groups, with a latest example found in LockBit’s 44GB leak of Royal Mail details.

The postal company had declined to pay LockBit’s “absurd” inquiring price tag of £65 million, prompting the team to publish the overall negotiation heritage among the two events on the web.

Microsoft Defender Risk Intelligence released an comprehensive put up on the group in June 2022, warning of its precise attack vectors and affiliated attacks.

Some sections of this posting are sourced from:
www.itpro.co.uk