Ransomware Attack on MCM Telecom: Blackout Group Strikes
Incident Date:
May 29, 2024
Overview
Title
Ransomware Attack on MCM Telecom: Blackout Group Strikes
Victim
MCM Telecom MX
Attacker
Blackout
Location
First Reported
May 29, 2024
Ransomware Attack on MCM Telecom by Blackout Group
Company Profile: MCM Telecom
MCM Telecom, also known as Techcomm Wireless MX, S.A. de C.V., is a prominent Mexican telecommunications company offering a variety of services to both individuals and businesses. These services include mobile and fixed-line communications, data transmission, and internet services.
Company Standout
Renowned for its extensive network coverage and reliable services, MCM Telecom is a popular choice among customers in Mexico. The company has established a strong presence in the country's telecommunications market and is committed to delivering high-quality services to its clientele.
Company Size
While the exact size of MCM Telecom is not publicly disclosed, it is a significant player in Mexico's telecommunications market, boasting a large customer base and a comprehensive range of services.
Company Vulnerabilities
As a telecommunications provider, MCM Telecom may have been targeted due to the sensitive nature of the data it handles, including customer information and communication networks. Additionally, the company's reliance on digital infrastructure and online services could have made it more susceptible to cyber attacks like ransomware.
Ransomware Attack Overview
On May 30, 2024, MCM Telecom fell victim to a ransomware attack orchestrated by the Blackout group. This attack resulted in a data leak of 15GB, exposing sensitive information belonging to the company.
Ransomware Group: Blackout
Blackout is a recently emerged ransomware group in the cyber threat landscape. The group employs a double-extortion method, encrypting files and exfiltrating sensitive data to leverage ransom demands. They have targeted various organizations, including medical institutions and businesses, demanding ransom for decrypting files and preventing data leaks.
Attack Penetration
Blackout likely penetrated MCM Telecom's systems through methods such as phishing emails, exploiting network vulnerabilities, or using compromised credentials. Once inside the network, the group encrypted files and exfiltrated data to carry out their ransom demands.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.