Ransomware Attack on MCM Telecom: Blackout Group Strikes

Incident Date:

May 29, 2024

World map

Overview

Title

Ransomware Attack on MCM Telecom: Blackout Group Strikes

Victim

MCM Telecom MX

Attacker

Blackout

Location

Ciudad de México, Mexico

, Mexico

First Reported

May 29, 2024

Ransomware Attack on MCM Telecom by Blackout Group

Company Profile: MCM Telecom

MCM Telecom, also known as Techcomm Wireless MX, S.A. de C.V., is a prominent Mexican telecommunications company offering a variety of services to both individuals and businesses. These services include mobile and fixed-line communications, data transmission, and internet services.

Company Standout

Renowned for its extensive network coverage and reliable services, MCM Telecom is a popular choice among customers in Mexico. The company has established a strong presence in the country's telecommunications market and is committed to delivering high-quality services to its clientele.

Company Size

While the exact size of MCM Telecom is not publicly disclosed, it is a significant player in Mexico's telecommunications market, boasting a large customer base and a comprehensive range of services.

Company Vulnerabilities

As a telecommunications provider, MCM Telecom may have been targeted due to the sensitive nature of the data it handles, including customer information and communication networks. Additionally, the company's reliance on digital infrastructure and online services could have made it more susceptible to cyber attacks like ransomware.

Ransomware Attack Overview

On May 30, 2024, MCM Telecom fell victim to a ransomware attack orchestrated by the Blackout group. This attack resulted in a data leak of 15GB, exposing sensitive information belonging to the company.

Ransomware Group: Blackout

Blackout is a recently emerged ransomware group in the cyber threat landscape. The group employs a double-extortion method, encrypting files and exfiltrating sensitive data to leverage ransom demands. They have targeted various organizations, including medical institutions and businesses, demanding ransom for decrypting files and preventing data leaks.

Attack Penetration

Blackout likely penetrated MCM Telecom's systems through methods such as phishing emails, exploiting network vulnerabilities, or using compromised credentials. Once inside the network, the group encrypted files and exfiltrated data to carry out their ransom demands.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.