French telco giant Altice reportedly hit by Hive ransomware attack
Dark web listings indicate that the French multinational was attacked in early August, but the company has made no announcement
French telecom giant Altice has reportedly been hit by a ransomware attack by the Hive hacker group.
The website RedPacket Security, which produces reports based on data scraped from the dark web, lists Altice as having been subject to a Hive ransomware attack on 9th August, with disclosure of the attack coming through on 25th August.
It's currently unclear how large the attack was, or what data may have been affected, but RedPacket's listing states that files are currently available to download through the Tor browser.
RELATED RESOURCE
An EDR buyer's guide
How to pick the best endpoint detection and response solution for your business
Altice is the second largest telecommunications company in France, behind Orange. Headquartered in the Netherlands, it serves millions of customers in Western Europe, Israel and the Caribbean.
The company formerly operated a US subsidiary, but after going public in 2017 this was spun off into Altice USA, a separately managed company that is still headed by Altice founder and chairman Patrick Drahi.
In 2021, Altice acquired a 12.1% stake in BT under direction by Drahi. This was increased to an 18% stake in December 2021, bringing the company’s total state in BT up to 18% and making it the largest BT shareholder. In response, the government announced in May that it would investigate the acquisition of shares for the benefit of national security.
However, just days ago the government stated in a press release that “no further action” would be taken on the acquisition of the shares, and consequently Altice will retain its large hold on BT for the foreseeable future.
Hive was first identified as a ransomware group in June 2021, and since has been used in attacks such those made recently against Costa Rican health providers.
In July, Microsoft warned that Hive’s threat actors had developed a more sophisticated variant of the ransomware written in the coding language Rust, with increased efficiency at encrypting the files of victims and containing parameters that are harder to identify and remedy in infected systems.
Ransomware attacks are on the rise, with one in 40 organisations now hit by threat actors and providers of critical infrastructure at increasing risk
IT Pro has approached Altice for comment. This article will be updated as more information becomes available.
-
The OpenAI and Anthropic containment breaches are a bit spooky, but also quite sillyOpinion An AI leaving notes to future versions of itself is pure sci-fi; forgetting to lock down an environment is prosaic
-
Bringing data to the heart of AISponsored AI is changing our approach to data, find out how HPE Alletra Storage can help your business
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
