Unsecured databases targeted with new wipe attack
Wednesday, July 22, 2020
The identity of the perpetrator remains unclear, along with the motivation for the hacking campaign. Researchers are even speculating that the hacker's intentions might be positive, with the attacks designed to remind businesses of the importance of protecting their data.
“For those affected by the attacks, it may be better to have your database wiped out than getting it stolen and offered to anyone on the Dark Web," said Ilia Kolochenko, Founder & CEO of web security company ImmuniWeb.
"It is, however, not unimaginable that before deleting a copy of database is made, and that the reason for deletion is to stop competitive cyber gangs from getting the same data. In web hacking campaigns, for example, rival gangs frequently patch vulnerable websites after taking control over them."
“To prevent such attacks organizations should maintain a comprehensive and update inventory of their assets, equipped with continuous security monitoring and patch management." Read Full Article
Information Security Buzz: Comment: England’s COVID-19 Test and Trace Programme ‘breaks GDPR data law’
Silicon UK: UK Track And Trace Scheme Broke UK Data Protection, Campaigners Claim