Acer, one of the largest and best known hardware and electronics corporation in the world have fallen victim to REvil/Sodinokibi ransomware which steals and encrypts data on targeted networks. This data is now being held hostage by the hackers who are threatening to leak confidential information if their demands are not met. The group have published screens of sensitive documents on data leak sites in order to prove themselves and also pressure the victims to pay the ransom. The amount of 50 million dollars by means of 214,151 XMR is being demanded as of yet with a 20% discount if the payment had arrived by March 17th. Acer's negotiators has proposed a fraction of this sum at 10 million dollars but the hackers do not seem impressed. If the payment is not made, or a settlement reached by the 28th of March then the ransom will double to a whopping 100 million dollars or 428,302 XMR.
The company is not the first victim of this kind of ransomware attack with evidence that the US corporation, Brown-Forman had their network breached in August of 2020, as well as Dairy Farm Group, a pan Asian retail chain, in January 2021. Similarly, 30 million USD was also demanded in that case with screenshots of sensitive data also leaked as proof. Another case in July, 2020 saw Light S.A, a Brazilian-based electrical energy company suffer a breach with a similar modus operandi.
According to Bleeping Computer, during the tense dialogue between the attackers and the Acer team, a warning not to "not repeat the fate of the SolarWind." was put forward which is an interesting reference. The SolarWind hack had far reaching consequences in the global community since it was an operation which was seen as attack on American infrastructure. The Americans had accused the Russian government of being behind it as well as a quip against Chinese hackers. This incident sparked a very tense atmosphere which is still ongoing in relation between these countries.
It is not yet known whether Acer will concede to these demands or not.
