Meow Ransomware Hits Woden Colombia, Exposes Sensitive Data

Incident Date:

August 28, 2024

World map

Overview

Title

Meow Ransomware Hits Woden Colombia, Exposes Sensitive Data

Victim

Woden Colombia

Attacker

Meow

Location

Output: Bogotá, Colombia

, Colombia

First Reported

August 28, 2024

Ransomware Attack on Woden Colombia by Meow Ransomware Group

Woden Colombia, a leading company in circular economy solutions within the telecommunications sector, has recently fallen victim to a ransomware attack orchestrated by the notorious Meow Ransomware group. This incident has compromised a significant amount of sensitive data, raising concerns about cybersecurity vulnerabilities in the industry.

About Woden Colombia

Woden Colombia, established in 2003 and headquartered in Bogotá, specializes in reverse logistics, post-sale support, and technical repair for telecommunications equipment, consumer electronics, and computers. The company operates across eight countries in Latin America and employs approximately 922 people. Woden is recognized for its commitment to sustainability, having generated over USD 123 million in annual savings for its clients and contributing to substantial environmental benefits.

Details of the Attack

The Meow Ransomware group has claimed responsibility for the attack, which has resulted in the compromise of a 100 GB data pack containing sensitive information. This includes employee data, client information, scanned payment documents, personal data such as dates of birth and passport scans with fingerprints, internal financial documents, contracts, agreements, and certifications. The attackers are offering access to this dataset for $12,000, highlighting the potential value of the stolen information to industry professionals and competitors.

About Meow Ransomware Group

Meow Ransomware emerged in late 2022 and is associated with the Conti v2 ransomware variant. The group employs various infection methods, including phishing emails, exploit kits, Remote Desktop Protocol (RDP) vulnerabilities, and malvertising. They use a combination of the ChaCha20 and RSA-4096 algorithms to encrypt data on compromised systems. Meow Ransomware is known for targeting industries with sensitive data and has a history of posting victim data on their leak site if the ransom is not paid.

Potential Vulnerabilities

Woden Colombia's extensive operations and handling of sensitive data make it a prime target for ransomware attacks. The company's commitment to high standards in environmental sustainability and social responsibility further underscores the potential impact of such breaches. The attack on Woden highlights the critical need for advanced cybersecurity measures to protect against sophisticated threat actors like the Meow Ransomware group.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.