IT services giant Cognizant suffers Maze Ransomware cyber attack

[Mahesh Sudula]

Content source

https://www.bleepingcomputer.com/news/security/it-services-giant-cognizant-suffers-maze-ransomware-cyber-attack/

Officially confirmed from CEO..I work for CTS. Clients are revoking WFH access to contain this incident.
------------------------------------------------------

Information technologies services giant Cognizant suffered a cyber attack Friday night allegedly by the operators of the Maze Ransomware, BleepingComputer has learned...
Cognizant is one of the largest IT managed services company in the world with close to 300,000 employees and over $15 billion in revenue.

As part of its operations, Cognizant remotely manages its clients through end-point clients, or agents, that are installed on customer's workstations to push out patches, software updates, and perform remote support services......

IOCs

Network

Domain mazedecrypt.top

IP 91.218.114.11

IP 91.218.114.25

IP 91.218.114.26

IP 91.218.114.31

IP 91.218.114.32

IP 91.218.114.37

IP 91.218.114.38

IP 91.218.114.4

IP 91.218.114.77

IP 91.218.114.79

 

[upnorth]

The Maze miscreants may not have been the ones to actually compromise the Cognizant network, though. Monitoring service Under the Breach claimed its team spotted someone selling access to an unnamed "major IT provider" for $200,000 roughly a week before the intrusion was revealed, leading it to speculate the Maze crew purchased access to Cognizant's systems from another hacker who performed the task of actually breaking into the network.

The strategy of leaking data if its demands aren't met is one favored by the ransomware gang, leading to a new threat for organizations that would otherwise just wiped the ransomware-infected devices and restored from backups without paying the ransom. Additionally, the Maze ransomware is particularly well-written and difficult to thwart with technical means.

Bad news: Cognizant hit by ransomware gang. Worse: It's Maze, which leaks victims' data online after non-payment

IT services biz warns customers could be at risk of infection, too

www.theregister.co.uk

 

[Mahesh Sudula]

Bad news: Cognizant hit by ransomware gang. Worse: It's Maze, which leaks victims' data online after non-payment

IT services biz warns customers could be at risk of infection, too

www.theregister.co.uk