Baguettes bandits strike again with ransomware, humiliation
Briefly

Hellcat, a notorious ransomware group, has made headlines by targeting key sectors like government and energy. Emerging around mid-2024, they utilize a ransomware-as-a-service model, providing tools to affiliates. Their double-extortion strategy involves data theft followed by encryption, threatening data leaks. The November attack on Schneider Electric involved a bizarre ransom demand of $125,000 in baguettes and highlighted their tactic of humiliating victims, as evidenced by the public release of employee data. The group exploits vulnerabilities, notably in Atlassian Jira, posing a significant threat to organizations.
Hellcat's inclusion of whimsical demands, like asking for payment in baguettes, showcases their approach to extortion, blending humor with malicious intent.
The attack on Schneider Electric demonstrates Hellcat's strategy to combine data theft with humiliation, effectively using psychological tactics to compel victims to comply.
Read at Theregister
[
|
]