Boeing Confirms Lockbit Hackers Wanted $200 Million Ransom After 2023 Hack | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker

Boeing declined to pay a $200 million ransom in exchange for securing 43GB of data stolen by hackers, the aerospace company confirmed this week.

Boeing was hacked in October 2023 by the LockBit ransomware gang, which threatened to release what it said was a “tremendous amount” of sensitive data. LockBit eventually published data from the hack, including IT management software, monitoring logs, and auditing tools.

Seven months later, an unsealed DOJ indictment for alleged Lockbit mastermind Dimitry Yuryevich Khoroshev mentioned that an unnamed “multinational aeronautical and defense corporation headquartered in Virginia” was targeted by Lockbit for $200 million. Boeing then confirmed to CyberScoop that it is that unnamed company.

Khoroshev, also known as LockBitSupp, is charged with creating and operating the LockBit group that boasts over 2,000 victims and $500 million in ransom payments. Law enforcement partially took down Lockbit’s operation earlier this year and went back for more earlier this week.

The $200 million is one of the larger ransom demands. Transportation giant Maersk reportedly lost $300 million in a similar attack in 2020. European electronics retailer MediaMarkt had a $240 million demand that was later negotiated down to a smaller, undisclosed number. Both of those pale in comparison to Amey PLC and its $2 billion demand after a hack in 2021.

Recommended by Our Editors

The Lockbit takedown, meanwhile, is part of law enforcement’s efforts to fight the frightening rise of ransomware by sowing distrust among criminals, the NSA’s former and current directors of cybersecurity told the crowd at the RSA Conference this week.

Like What You’re Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.

var facebookPixelLoaded = false;
window.addEventListener(‘load’, function() {
document.addEventListener(‘scroll’, facebookPixelScript);
document.addEventListener(‘mousemove’, facebookPixelScript);

function facebookPixelScript() {
if (!facebookPixelLoaded) {
facebookPixelLoaded = true;
document.removeEventListener(‘scroll’, facebookPixelScript);
document.removeEventListener(‘mousemove’, facebookPixelScript);

! function(f, b, e, v, n, t, s) {
if (f.fbq) return;
n = f.fbq = function() {
n.callMethod ?
n.callMethod.apply(n, arguments) : n.queue.push(arguments)
if (!f._fbq) f._fbq = n;
n.push = n;
n.loaded = !0;
n.version = ‘2.0’;
n.queue = [];
t = b.createElement(e);
t.async = !0;
t.src = v;
s = b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t, s)
document, ‘script’, ‘//’);

fbq(‘init’, ‘454758778052139’);
fbq(‘track’, “PageView”);


Click Here For The Original Story From This Source.


National Cyber Security