RansomHub Strikes Mercatino S.R.L. in Major Ransomware Attack
Incident Date:
April 18, 2024
Overview
Title
RansomHub Strikes Mercatino S.R.L. in Major Ransomware Attack
Victim
Mercatino Srl
Attacker
Ransomhub
Location
First Reported
April 18, 2024
RansomHub Targets Mercatino S.R.L. in Significant Ransomware Attack
Attack Overview
Mercatino Franchising, has recently fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. The attack involved the deployment of ransomware which led to the theft of approximately 1.5 terabytes of data, including the virtual hard drives of the company's database. This incident marks a significant breach given the volume of data compromised.
Company Profile
Mercatino S.R.L. is a notable entity within the Italian retail market, specializing in the sale of used and second-hand goods, with a strong emphasis on furniture. This company facilitates a platform for the buying and selling of pre-owned items, promoting sustainable and affordable shopping practices.
Vulnerabilities
The choice of Mercatino S.R.L. as a target by RansomHub can be attributed to several factors. Firstly, the company's significant data repository, stemming from its active online platform, presents a lucrative target for data theft and ransom operations. Additionally, as a small to medium-sized enterprise, Mercatino may not have the extensive cybersecurity measures that larger corporations might possess, making it a relatively softer target for such sophisticated attacks.
RansomHub's Operational Tactics
RansomHub operates as a Ransomware-as-a-Service (RaaS) group, engaging affiliates who carry out attacks under its banner. This group is known for its strict operational guidelines and the high percentage of ransom proceeds it offers to its affiliates. The attack on Mercatino S.R.L. aligns with RansomHub’s pattern of targeting entities across various sectors and countries, underscoring its global threat landscape.
References
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.