conti attacks GRS Group

Incident Date:

March 29, 2022

World map

Overview

Title

conti attacks GRS Group

Victim

GRS Group

Attacker

Conti

Location

Thornliebank, United Kingdom

Glasgow 6NG, United Kingdom

First Reported

March 29, 2022

GRS Group Targeted by Conti Ransomware Group

Company Size and Unique Features

GRS Group is a global leader in commercial real estate services, focusing on risk mitigation and delivering on promises. Their services encompass real estate transaction services, risk mitigation, and embodying their core values of people, purpose, and passion. The company's commitment to a common framework for business activities worldwide aims to be an integral part of their clients' success, ensuring the safety and privacy of critical data assets.

Vulnerabilities and Targeting

The Conti ransomware group has targeted GRS Group by exploiting vulnerabilities within their systems. While the specific vulnerabilities and methods used in the attack are not detailed, it is known that ransomware groups often threaten to sell or leak exfiltrated data or authentication information if a ransom is not paid. This tactic underscores the critical need for robust cybersecurity measures to protect sensitive information.

Mitigation Strategies

GRS Group has responded to these cybersecurity threats by leveraging its IT support and cybersecurity services division, GRS Technology Solutions. This division is dedicated to protecting clients' businesses from cyber-attacks through enterprise-class solutions for data security and regulatory compliance. Their efforts underscore the importance of proactive measures in safeguarding the privacy and security of critical data assets.

The attack on GRS Group by the Conti ransomware group highlights the ongoing threat that ransomware poses to companies, regardless of their sector. The real estate services company, known for its commitment to managing complexity and mitigating risk, underscores the importance of continuous vigilance and advanced cybersecurity measures to protect against such threats.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.