A hacker and ransomware group known as Lockbit recently published gigabytes of data that it had reportedly stolen from the servers of aeronautics company, Boeing. The group said that it did so after its target failed to pay ransom.
The data from Boeing was published on through Lockbit’s website. According to multiple reports, the data cluster includes things such as backup files from a variety of systems, including a Citrix Xen Desktop, Ivanti Service Management, to name a few. On that note, the appearance of alleged data from Citrix hardware raises speculation that the hacker group may have gained access to said systems via a recently disclosed vulnerability known as Citrix Bleed.
“Boeing ignored our warnings. We will start to publish data. In [the] first batch we will publish just around 4GB of sample data (most recent),” LockBit’s site read. “In [a] few days we will publish the databases if we do not see a positive cooperation from Boeing.”
Boeing has confirmed that it was indeed a victim of a cyberattack, but fell short of providing any further details about the incident, or how Lockbit had breached its network. At the time of writing, the company also said that the issue was currently under investigation.
There has been a surge in ransomware attacks in the past several years, with the Lockbit group being at the forefront of these attacks. The group itself operates on an international level and besides Boeing, can count Continental, the UK Royal Mail, the Italian Internal Revenue Service, and the City of Oakland among its victims.
(Source: TechTarget, Bleeping Computers, Hot Hardware)
