Ransomware Attack on Umbrella Properties by Dispossessor Group Exposes Cybersecurity Flaws
Incident Date:
July 12, 2024
Overview
Title
Ransomware Attack on Umbrella Properties by Dispossessor Group Exposes Cybersecurity Flaws
Victim
UMBRELLA PROPERTIES
Attacker
Dispossessor
Location
First Reported
July 12, 2024
Ransomware Attack on Umbrella Properties by Dispossessor Group
Overview of Umbrella Properties
Umbrella Properties, based in Coburg, Oregon, specializes in property management, development, and investment. Founded in 1985, the company manages a diverse portfolio that includes apartment communities, duplexes, and commercial properties. Their comprehensive property management services cover marketing, leasing, maintenance, and tenant relations. Additionally, they are involved in property development and offer investment opportunities in their managed properties. Despite their extensive services, the company has received poor customer reviews and several complaints, indicating potential vulnerabilities in their operations.
Details of the Attack
Umbrella Properties recently fell victim to a ransomware attack orchestrated by the Dispossessor group. The attackers have threatened to release sensitive data on public platforms, including YouTube, unless a ransom is paid. They have already posted a video showcasing some of the compromised files, highlighting the severity of the breach. This incident underscores significant vulnerabilities in Umbrella Properties' cybersecurity measures and emphasizes the increasing frequency of cyberattacks on businesses.
About Dispossessor Ransomware Group
Dispossessor emerged in the ransomware scene following a crackdown on the notorious LockBit group. The group mimics LockBit’s structure and content, suggesting either a rebranding effort by the same operators or a new group leveraging LockBit’s infrastructure. Dispossessor operates under the Ransomware-as-a-Service (RaaS) model, allowing affiliates to distribute ransomware and execute attacks. Unlike typical ransomware groups, Dispossessor functions primarily as data brokers, publishing data leaks from other groups.
Potential Vulnerabilities and Penetration Methods
The attack on Umbrella Properties highlights potential vulnerabilities in their digital security infrastructure. Given the company's poor customer reviews and recent complaints, it is plausible that inadequate cybersecurity measures contributed to the breach. Dispossessor could have penetrated the company's systems through phishing attacks, exploiting software vulnerabilities, or leveraging weak passwords. The group's opportunistic approach and reliance on affiliates from other ransomware groups further complicate the attribution and mitigation of such attacks.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.