A piece of the Ryuk Ransomware infected the network of the multinational cybersecurity firm Prosegur, forcing the company to shut down it.

The Spanish multinational security company Prosegur announced that it was of a ransomware attack that disrupted its telecommunication platform.

Comunicado sobre incidencia de seguridad informática pic.twitter.com/TMdOJzkFCB— Prosegur (@Prosegur) November 27, 2019The network of the Prosegur firm was infected with a piece of the Ryuk ransomware, the company temporary limited communications with its customers to avoid the malware spreading.

Actualización sobre incidencia de seguridad informática pic.twitter.com/YOu6zrKKly— Prosegur (@Prosegur) November 27, 2019The Spanish website Derecho de la Red confirmed the incident and reported that the employees were sent home, the infection affects all the locations in Europe of the company.

At the time of writing it is not clear when the network of the security firm was infected.

“It is unclear when Prosegur detected the incident, but some reports occurred before 6 a.m. (GMT+1), with some sources saying that the company network became unavailable around four in the morning, local time, and it is still down at the moment of writing.” reported BleepingComputer.

Below the update on the incident published by the company on Twitter a few minutes ago,

Update on incident of information security (II) pic.twitter.com/Qd0EUxy03P— Prosegur (@Prosegur) November 28, 2019Recently similar incidents affected other Spanish organizations, NTT DATA-owned firm Everis​, one of Spain’s largest managed service providers (MSP), has suffered a ransomware attack. The systems of the company were infected with the BitPaymer ransomware. 

Spain’s largest radio station Cadena SER (Sociedad Española Radiodifusión) was also victim of a similar attack in the same period.

At the time of writing the company announced that the Ryuk ransomware was fully contained and the firm has deployed the necessary measures to contain the threat.

window._mNHandle = window._mNHandle || {};
window._mNHandle.queue = window._mNHandle.queue || [];
medianet_versionId = “3121199”;

try {
window._mNHandle.queue.push(function () {
window._mNDetails.loadTag(“762221962”, “300×250”, “762221962”);
});
}
catch (error) {}

Pierluigi Paganini

(SecurityAffairs – hacking, ransomware)

The post A Ransomware infected the network of the cybersecurity firm Prosegur appeared first on Security Affairs.