Posts

Showing posts from December, 2020

Whirlpool hit by Nefilim ransomware attack

Image
    Whirlpool hit by Nefilim ransomware attack   Whirlpool is one of the world's largest home application makers with appliances under its name and KitchenAid, Maytag, Brastemp, Consul, Hotpoint, Indesit, and Bauknecht. Whirlpool employs 77,000 people at 59 manufacturing & technology research centers worldwide and generated approximately $20 billion in revenue for 2019.The leaked data included documents related to employee benefits, accommodation requests, medical information requests, background checks, and more. Nefilim is a ransomware known to encrypt files on a compromised system and appends the file extension .NEF1LIM to the files it encrypts. A ransom note named NEF1LIM-DECRYPT.txt is dropped to the directory of every file it encrypts.The ransom note informs the victims that their data has been stolen and if the perpetrators are not contacted, the data will be leaked. Upon execution, the analyzed variant behaves like typical variants of the ransomware and append...