Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn’t paid.
The number one Apple supplier Quanta Computer on Wednesday said they have been hit by a ransomware attack from the REvil ransomware hackers group, which they are demanding the iPhone maker to pay a ransom of $50 million to prevent leaking sensitive files on the dark web and at the same time to the public domain.
In a post shared on its deep web “Happy Blog” portal, the threat actor said it came into possession of schematics of the U.S. tech giant company’s products such as MacBooks and Apple Watch by infiltrating the network of the Taiwanese manufacturer, claiming it’s making a ransom demand to Apple after Quanta expressed no interest in paying to recover the stolen blueprints.
“Our team is negotiating the sale of large quantities of confidential drawings and gigabytes of personal data with several major brands,” the REvil operators said. “We recommend that Apple buy back the available data by May 1.”
Since first detected in June 2019, REvil (aka Sodinokibi or Sodin) has emerged as one of the most prolific ransomware-as-a-service (RaaS) groups, with the group being the first to adopt the so-called technique of “double extortion” that has since been emulated by other groups to maximize their chances of making a profit.
The strategy seeks to pressure victim companies into paying up mainly by publishing a handful of files stolen from their extortion targets prior to encrypting them and threatening to release more data unless and until the ransom demand is met.
The latest development also marks a new twist in the double extortion game, in which a ransomware cartel has gone after a victim’s customer following an unsuccessful attempt to negotiate ransom with the primary victim.
We have reached out to Quanta for comment, and we will update the story if we hear back.
However, in a statement shared with Bloomberg, the company said it worked with external IT experts in response to “cyber attacks on a small number of Quanta servers,” adding “there’s no material impact on the company’s business operation.”
