- Feb 25, 2017
- 2,479
In May 2022, an automotive supplier was hit with three separate ransomware attacks. All three threat actors abused the same misconfiguration – a firewall rule exposing Remote Desktop Protocol (RDP) on a management server – but used different ransomware strains and tactics.
Source: Lockbit, Hive, and BlackCat attack automotive supplier in triple ransomware attack
Last edited by a moderator: