A widely-used ASP.NET service provider, used by more than 440,000 customers, was taken offline on Saturday after cyber criminals targeted its systems with ransomware.
SmarterASP confirmed this weekend that its hosting services were under attack, with hackers encrypting all the data belonging to itself as well as its 440,441 users. The SmarterASP website, too, was taken offline on Saturday before it was restored the next day.
"Your hosting account was under attack and hackers have encrypted all your data," the provider said in a statement.
The most popular ransomware strains targeting UK businesses How to keep your files safe from ransomware How can you protect your business from crypto-ransomware?
"We are now working with security experts to try to decrypt your data and also to make sure this would never happen again. Please stay tuned for more info."
The firm advised that users refrain from contacting the company directly, given a shortage of staff to deal with the complaints, and asked users to keep up-to-date with its Facebook page for more information.
SmarterASP subsequently said this morning that it had developed a solution to resolving the problem, but needs more time to fully restore services. Moreover, work is underway on a "new system" built to prevent issues recurring in the future.
"We will dedicate all of our time, money and knowledge on this matter so no customers of ours have to face this again," the followup statement said.
However, no additional detail as to the nature of the new system, or how it would be different from SmarterASP's previous system, was released.
At the time of writing, the company has restored 40% of its customers' affected accounts, according to its Facebook page, and expects most services to be restored over the next 24 hours.
ASP.NET is an open-source web application framework designed for web development based around dynamic design. It was developed by Microsoft to allow developers to build dynamic websites as well as applications and services.
The company hasn't disclosed whether it's restoring its services from an archival or backup system, or whether it's complied with the cyber criminals' ransom demands.
Although the majority of IT security professionals don't believe such ransoms should be paid, 40% would consider paying ransomware demands as it's the easiest method of remediation, according to research.
IT Pro approached the company for more details surrounding the ransomware attack, including what measures it's taken to prevent future attacks.
-
AI coding tools are booming – and developers in this one country are by far the most frequent usersNews AI coding tools are soaring in popularity worldwide, but developers in one particular country are among the most frequent users.
-
Cisco warns of critical flaw in Unified Communications Manager – so you better patch nowNews While the bug doesn't appear to have been exploited in the wild, Cisco customers are advised to move fast to apply a patch
-
A prolific ransomware group says it’s shutting down and giving out free decryption keys to victims – but cyber experts warn it's not exactly a 'gesture of goodwill'News The Hunters International ransomware group is rebranding and switching tactics
-
Swiss government data published following supply chain attack – here’s what we know about the culpritsNews Radix, a non-profit organization in the health promotion sector, supplies a number of federal offices, whose data has apparently been accessed.
-
Ransomware victims are getting better at haggling with hackersNews While nearly half of companies paid a ransom to get their data back last year, victims are taking an increasingly hard line with hackers to strike fair deals.
-
LockBit data dump reveals a treasure trove of intel on the notorious hacker groupNews An analysis of May's SQL database dump shows how much LockBit was really making
-
‘I take pleasure in thinking I can rid society of at least some of them’: A cyber vigilante is dumping information on notorious ransomware criminals – and security experts say police will be keeping close tabsNews An anonymous whistleblower has released large amounts of data allegedly linked to the ransomware gangs
-
It's been a bad week for ransomware operatorsNews A host of ransomware strains have been neutralized, servers seized, and key players indicted
-
Everything we know about the Peter Green Chilled cyber attackNews A ransomware attack on the chilled food distributor highlights the supply chain risks within the retail sector
-
Scattered Spider: Who are the alleged hackers behind the M&S cyber attack?News The Scattered Spider group has been highly active in recent years
