Due to the devastating Kaseya supply-chain attack, the REvil ransomware gang has lately made it to the news. While the whole cybersecurity world was focused on Kaseya, the attackers went about their business silently. In the most recent attack, the Spanish telecom firm MasMovil was also a victim of the REvil ransomware.
MasMovil, Spanish Telecom Firm targeted by REvil Ransomware Group
The REvil ransomware gang recently claimed to have targeted MasMovil, a Spanish telecommunications firm.
With approximately 11.3 million customers, MasMovil Ibercom S.A. is Spain’s fourth largest telecommunications company.
REvil appears to have revealed this incident on or before June 30, 2021, implying that the attack may have occurred before to Kaseya’s fiasco.
The REvil ransomware gang has revealed this activity on its official dark web blog, according to Hackread.com. The attackers claimed to have accessed MasMovil’s network and downloaded “databases and other important data”
While they haven’t yet leaked this data on their website, they have shared several screenshots to support their claim. RESELLERS, OCU, PARLEM, backup, Agencias, and other folders can be seen in these screenshot images.
MasMovil has yet to provide a statement addressing the ransomware attack, despite Hackread reporting that MasMovil had admitted the cybersecurity incident.
It’s also unknown how REvil got onto MasMovil’s network, how much ransom they’re demanding, and whether they’ve received it. However, given the attackers’ previous record of leaking stolen data if the victim does not pay the ransom, REvil may dump MasMovil’s data on its leak site if the MasMovil does not pay the ransom.