Cyber attack. For representation purpose
Credit: Reuters file photo.
Bengaluru: A Bengaluru firm has encountered a ransomware attack with the hackers demanding up to $70,000 (Rs 60.26 lakh) to release the data.
The cyberattack occurred at Whiteboard Technologies Pvt Ltd between 4.23 pm and 5 pm on March 31.
The Sanjaynagar-based firm offers structural steel detailing services and has a branch in Corcoran, USA.
Radha Krishnan S, the company’s human resource executive, filed a complaint on April 7 after verifying the details, the police said. He told the police that the company’s database was hacked by unknown persons.
"The files were then placed under encryption," he stated. "A data theft also has occurred, including customers’ sensitive information and business data."
Krishnan claimed that the hackers had threatened to leak the data. "To release the key to decrypt the files, they (hackers) are demanding between $700 and $70,000," he stated. "The threats are being issued by @Dmc_eze on Telegram and through encrpt@onionmail.org."
The North CEN police have registered an FIR under relevant sections of the Information Technology Act.
A team led by Assistant Commissioner of Police Pavan N is investigating the case.
CERT-In informed
Investigators have alerted the Indian Computer Emergency Response Team (CERT-In).
"The emergency response team has been informed and attempts are being made to decode the encryption," a senior police officer told DH. "Unless the hacker provides the decryption key, it is very difficult to recover the data, unless there is a backup on the cloud or a separate external hard drive."
CERT-In's experts constantly analyse patterns, which won't be readily available with the cybercrime police at their stations.
"The CERT-In team coordinates with different countries. In case CERT-In has already analysed a pattern similar to the ransomware used in this case, they may have some decryption keys that may work," the senior officer added.
What’s a ransomware attack?
It's a type of cyberattack where hackers encrypt a victim’s data or electronic devices and demand a ransom to release the decryption key. Malware like Trojans are disguised as genuine files leading the victim to download it and affect their devices. WannaCry and CryptoLocker are some recent examples of major ransomware attacks.