BianLian Ransomware: The MOOver Cyberattack Takes Center Stage.

January 2, 2024
1 min read

– The BianLian ransomware group claims to have targeted MOOver and gained access to 1.1 terabytes of data.
– The official website of MOOver is still accessible, raising doubts about the authenticity of the cyberattack.

The BianLian ransomware group has launched a cyberattack on MOOver.com, claiming to have breached 1.1 terabytes of data from the organization. MOOver.com is an online platform that offers various services to individuals and businesses. However, the official website of MOOver remains fully accessible, leading to doubts about the authenticity of the attack. The motives behind the attack are unknown as the hackers have not disclosed any details. This is not the first time the BianLian ransomware group has targeted companies. In the past, they have attacked organizations such as Griffing & Company, P.C., Dow Golub Remels & Gilbreath, International Biomedical, Jebsen Group, and the Australian Real Estate Group (AREG). The group is known for its fast encryption speed and the use of the Go programming language in its code. They gain access to victim systems through Remote Desktop Protocol (RDP) credentials and exfiltrate data using tools such as File Transfer Protocol (FTP), Rclone, or Mega. Cybersecurity experts emphasize the need for robust preventive measures to protect sensitive data from these cybercriminals.

Latest from Blog

Apache’s OFBiz gets new fix for RCE exploits

TLDR: Apache released a security update for OFBiz to patch vulnerabilities, including a bypass of patches for two exploited flaws. The bypass, tracked as CVE-2024-45195, allows unauthenticated remote attackers to execute code