Micro-Star International (MSI), a Taiwanese PC company, has officially confirmed that it was the victim of a cyber attack on its systems. The company promptly initiated incident response and recovery measures upon detecting network anomalies, and has alerted the relevant law enforcement agencies. MSI has not disclosed any details regarding the attack, including the time of the attack and whether any proprietary information, such as source code, was exfiltrated. The affected systems have since resumed normal operations with no significant impact on financial business, according to a notice released by the company on Friday. MSI has also filed a regulatory statement with the Taiwan Stock Exchange, detailing the enhanced security measures it has implemented to protect its data. The company is urging users to only obtain firmware/BIOS updates from its official website and to refrain from downloading files from other sources. This disclosure follows the recent spotlighting of a new ransomware gang known as Money Message by Zscaler.
Cyble published an analysis this week, wherein it was noted that the group in question employs a double extortion technique to target its victims, which involves the exfiltration of the victim’s data prior to its encryption. Should the ransom remain unpaid, the data is then uploaded to the group’s leak site. This development follows the confirmation of a breach of Acer’s systems, resulting in the theft of 160 GB of confidential data, which was advertised for sale on the now-defunct BreachForums on March 6, 2023.
