Another large Data Center service provider became a victim of ransomware

Warning: These 3 dangerous ransomware could explode all over the world, 1800 large enterprises were 'shot'.
PureLocker - a very 'weird' ransomware strain that can encrypt servers

Ransomware appears to be redirecting attacks to major data centers on a global scale. CyrusOne, one of the largest data center management service providers in the United States with dozens of data centers, became the latest victim of ransomware after suffering a massive attack on Thursday, Last 5/12. Currently, the remediation is still being actively implemented.

Fortunately for CyrusOne, the attack was detected and prevented early, affecting only a small amount of data infrastructure the company was managing. Specifically, there are 6 customers of CyrusOne affected in the past incident. These six companies are mainly storing data in CyrusOne's New York Data Center system.

The parts affected by the attack are mostly confined to data management and do not include IX (internet exchange) and IP network services (IP Network Services). It is known that CyrusOne is currently responsible for managing 48 large data centers worldwide. According to the announcement of CyrusOne, this company is currently providing database management services, maintenance and protection of IT infrastructure operations for about 1,000 customers (mostly businesses), more than 200 among them are in the top 1,000 of Fortune.

In parallel with the remedial work, an investigation into the case is also underway. CyrusOne has also been actively working with independent security experts to resolve the issue. The seriousness of the company has partly created peace of mind for the affected parties.

Another large Data Center service provider became a victim of ransomware Picture 1

It's still unclear which malicious code is behind the whole problem, but according to ZDNet security experts, REvil (also known as Sodinokibi) is probably the ransomware strain involved. join the attack.

Along with MegaCortex, Ryuk and LockerGoga, REvil is currently one of the biggest damage ransomware in 2019 with a series of large-scale attack campaigns worldwide, causing tens of millions of dollars in damage. This type of ransomware tends to be used by professional cybercrime organizations, primarily targeting businesses.

David Pac

Update 09 December 2019

You should read it

May be interested

A ransomware declared decommissioned and refunded the ransom to the victim
declared decommissioning and returning the ransom to the victim are certainly extremely rare in the world of ransomware.
What is Ransomware CryptoWall 4.0? How to clean up Ransomware CryptoWall 4.0?
cryptowall 4.0 is a form of ransomware that encrypts files, this ransomware encrypts the personal documents it finds on the victim's computer using the rsa-2048 key (256-bit aes cbc encryption algorithm). ). it will then display a message saying that to decrypt the data you need to pay a sum of money.
Ransomware is on the rise in 2025: Here are 6 quick tips to protect your data!
ransomware attacks often make headlines, and the worst part is that they target ordinary people, not just large corporations.
Warning: These 3 dangerous ransomware could explode all over the world, 1800 large enterprises were 'shot'.
the netherlands national cyber security center (ncsc) has issued an emergency report, warning of three ransomware strains that are storming around the world, and will likely explode in the near future.
How to Choose an Email Service Provider
choosing an email service provider to help with email marketing and bulk email services can seem overwhelming. you can narrow down the options by first considering how you will use the service, what your budget is, and how much tech...
How to remove / fix ransomware WannaCry
if unfortunately a victim of ransomware is stirring up many countries, this is how you handle wannacry and protect your computer and your data.
Detection of a new ransomware strain targeting the Windows search engine
a ransomware attack begins when the victim receives an executable file containing malicious code via email.
Microsoft System Center Service Manager - Part 2: Installation
in this article, i will show you how to install the basic service desk services as well as the data warehouse components of this product.
How to Get Espn3
espn3, also known as watchespn, is an online-only streaming service for live sports. having a subscription to an internet or tv service provider plan is needed to access the service. once you have one, watching videos is as simple as...
Ransomware STOP started installing Trojans to steal victim passwords
in addition to encrypting files on the system, ransomware stop strains have also started quietly installing the azorult password stealing trojan on the victim's computer to steal account information, electronic wallet, and file desktop ...

Another large Data Center service provider became a victim of ransomware

You should read it

May be interested

Attack the network