Swiss Cloud Suffers Ransomware Attack

Threat Watch

Threat Watch Swiss Cloud Suffers Ransomware Attack

Swiss Cloud Suffers Ransomware Attack

On April 27^th, one of Switzerland’s largest cloud hosting providers, Swiss Cloud, suffered a ransomware attack affecting around 6,500 customers. Currently, the organization is working around the clock to restore operations as early as this week. It has brought in HP Enterprise and Microsoft resources to assist in the recovery process. One of the customers most affected by the downtime was Sage, a Human Resources platform for German-speaking countries in the region.

ANALYST NOTES

While it is uncommon to see large cloud providers affected by ransomware at such a scale seen with Swiss Cloud, when they are affected, cloud providers often are hit with the most significant ransom demands. The threat actors behind ransomware know that when a company’s main revenue stream is at stake, the company is more likely to pay a high price to restore operations as quickly as possible. Developing playbooks for when critical applications are down can help prepare teams to respond in cases like this when providers are dealing with downtime.

References:
https://therecord.media/swiss-cloud-becomes-the-latest-web-hosting-provider-to-suffer-a-ransomware-attack/

The war in Ukraine and its impact on how China views Taiwan

Digging through Rust to find Gold: Extracting Secrets from Rust Malware

5 Critical Criteria for evaluating Managed Detection & Response (MDR)

How Ransomware Capabilities Are Evolving and What You Can Do to Keep Your Organization Secure

Threat Watch