"Darktrace Denies Getting Hacked After Ransomware Group Names Company on Leak Site"

Cybersecurity company Darktrace issued a statement recently after it was named on the leak website of the LockBit ransomware group.  In the statement, the company noted that the cybercriminal gang was claiming that they had compromised Darktrace's internal security systems and had accessed their data.  The company stated that its security teams had run a full review of their internal systems and could see no evidence of compromise.  Darktrace noted that they would continue to monitor the situation extremely closely, but based on their current investigations, they are confident that their systems remain secure and all customer data is fully protected.  On LockBit's leak website, the post suggested that data was stolen from Darktrace and that the cybercriminals were asking for a $1 million ransom.  The fake data on the LockBit site was apparently test data posted by the hackers while doing maintenance.  A recent Twitter post from Singapore-based threat intelligence firm DarkTracer, which is unrelated to Darktrace, read, "The reliability of the RaaS service operated by LockBit ransomware gang seems to have declined." The cybercriminals were not happy with DarkTracer's allegations but confused it with UK-based Darktrace and published a post suggesting that they had hacked Darktrace.  These types of mistakes are not uncommon for ransomware groups.  It's worth noting that there is also no evidence that LockBit targeted DarkTracer either.  LockBit has also been known to make false claims when it comes to cybersecurity companies. 

 

SecurityWeek reports: "Darktrace Denies Getting Hacked After Ransomware Group Names Company on Leak Site"

 

Submitted by Anonymous on