Threat Intelligence Brief
Curated summary with source attribution
Source: channelnewsasia.com
Threat Risk: High
Victim: Ecopetrol and 15 subsidiaries
Incident: Unauthorized access to cloud storage leading to data theft and an attempted ransomware attack.
Impact: Theft of data from 3,300 accounts and potential material adverse financial and reputational effects.
Attacker: Unidentified threat actors
Analysis: Threat actors compromised cloud-based file storage across 15 subsidiaries, stealing data from approximately 3,300 accounts. While a ransomware deployment was successfully blocked, the attackers are now using extortion tactics to pressure the company. The incident underscores the risks associated with cloud storage security in critical infrastructure sectors.
Recommendations: Audit and harden cloud-based file storage permissions and access controls.; Enforce multi-factor authentication across all corporate and subsidiary accounts.; Develop and test a comprehensive response plan for data extortion and leak scenarios.
Source: Channel News Asia
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source