Ransomware

Over 35M impacted by cyberattack against Vans, North Face owner

Share

TechCrunch reports that U.S. global apparel and footwear company VF Corporation, which owns Vans, The North Face, and Supreme, had data from 35.5 million customers compromised in a cyberattack last month, which has been claimed by the ALPHV/BlackCat ransomware operation. No further information regarding the types of data stolen by the threat actors was provided in VF Corp.'s regulatory filing. However, the company emphasized that none of its systems contain customers' Social Security numbers, payment card details, and bank account data while adding that there has been no evidence suggesting the theft of customer passwords. Meanwhile, significant progress has been reported by VF Corp. in the restoration of IT systems and data impacted by the attack, which involved the encryption of certain systems that resulted in operational disruptions. Orders delayed by the intrusion have also been fulfilled but "minor operational impacts" persist, said VF Corp. in the regulatory filing.

An In-Depth Guide to Ransomware

Get essential knowledge and practical strategies to protect your organization from ransomware attacks.

Related

Novel WolfsBane backdoor leveraged in Chinese attacks against Linux systems

Attacks with Wolfsbane commence with the deployment of the 'cron' dropper delivering the KDE desktop component-spoofing launcher, which deactivates SELinux and alters user configuration files before triggering the privacy malware component that has file operation, data theft, and system manipulation command support, an analysis from ESET revealed.

ONNX phishing-as-a-service operation disrupted

Organizations in the financial services sector have been primarily targeted by the ONNX, whose Telegram-based operations had been cut off following a court order that allowed Microsoft to transfer the PhaaS platform's infrastructure to its servers, according to Microsoft Digital Crimes Unit Assistant General Counsel Steven Masada.

Ransomware attacks primarily caused by poor cyber hygiene

Aside from primarily leveraging basic usernames for their accounts, organizations impacted by ransomware intrusions from July to September — including those in the government and healthcare industries — also mostly failed to implement multi-factor authentication that could have deterred brute-force attacks.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.