Monday, March 27, 2023
  • Advertise With Us
  • Write For Us
  • Contact Us
  • About Us
  • Editorial Calendar
Download Latest Issue - Free!
The Cyber Express
World Cybercon Middle East
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Cinoshi Malware-as-a-Service

    MaaS on Sale: Cybercrime Forum Selling Cinoshi Malware-as-a-Service for 2000 Rubles

    E-learning Platform Moodle

    Vulnerabilities Found in E-learning Platform Moodle, Users Urged to Update

    Explicit Online Content of Children

    Removing Explicit Online Content of Children is a Global War

    Rio Tinto Cyber Attack

    Rio Tinto Cyber Attack Puts Employee Information at Risk

    Team Insane PK Targets Indian Businesses

    Team Insane PK Targets Indian Businesses, Leaks Sensitive Data

    Goa Cyber attack 2

    Cl0p Ransomware Lists Goa State Government as Victim

    opt out of ChatGPT data collection

    OpenAI Has Privacy Issues: How Do We Opt Out of ChatGPT Data Collection?

    The City of Toronto Cyberattack

    The City of Toronto Cyberattack Confirmed, Linked to GoAnywhere Data Breach

    Counter Strike 2 leaked

    Oh No! Counter Strike 2 leaked Before Official Launch

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    CISA

    13 Specialists to Join Forces with CISA’s Cybersecurity Advisory Committee

    GISEC Global 2023

    GISEC Global 2023: H.E. Dr Mohamed Hamad Al-Kuwaiti Recognized for Outstanding Contributions in Advancing Global Cybersecurity

    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Cinoshi Malware-as-a-Service

    MaaS on Sale: Cybercrime Forum Selling Cinoshi Malware-as-a-Service for 2000 Rubles

    E-learning Platform Moodle

    Vulnerabilities Found in E-learning Platform Moodle, Users Urged to Update

    Explicit Online Content of Children

    Removing Explicit Online Content of Children is a Global War

    Rio Tinto Cyber Attack

    Rio Tinto Cyber Attack Puts Employee Information at Risk

    Team Insane PK Targets Indian Businesses

    Team Insane PK Targets Indian Businesses, Leaks Sensitive Data

    Goa Cyber attack 2

    Cl0p Ransomware Lists Goa State Government as Victim

    opt out of ChatGPT data collection

    OpenAI Has Privacy Issues: How Do We Opt Out of ChatGPT Data Collection?

    The City of Toronto Cyberattack

    The City of Toronto Cyberattack Confirmed, Linked to GoAnywhere Data Breach

    Counter Strike 2 leaked

    Oh No! Counter Strike 2 leaked Before Official Launch

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    CISA

    13 Specialists to Join Forces with CISA’s Cybersecurity Advisory Committee

    GISEC Global 2023

    GISEC Global 2023: H.E. Dr Mohamed Hamad Al-Kuwaiti Recognized for Outstanding Contributions in Advancing Global Cybersecurity

    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Cybersecurity News

Mayday! Nok Air Faces Another Ransomware Attack, This Time LockBit

The LockBit group has announced that it has added Nok Air to its list of victims and has threatened to publish the data by March 15, 2023.

Ashish Khaitan by Ashish Khaitan
March 1, 2023 - Updated on March 2, 2023
in Cybersecurity News, Firewall Daily, Ransomware News
0
Nok Air
622
SHARES
3.5k
VIEWS
Share on LinkedInShare on Twitter

Nok Air, the Thailand-based low-cost airline, has fallen victim to another ransomware attack, this time at the hands of the LockBit ransomware group.

The ransomware news comes just months after the airline was targeted by the ALPHV ransomware group, which claimed to have exfiltrated over 500GB of data.

You might also like

MaaS on Sale: Cybercrime Forum Selling Cinoshi Malware-as-a-Service for 2000 Rubles

Vulnerabilities Found in E-learning Platform Moodle, Users Urged to Update

Removing Explicit Online Content of Children is a Global War

The LockBit group has announced that it has added Nok Air to its list of victims and has threatened to publish the data it has stolen by March 15, 2023.

The airline primarily offers domestic services in Thailand and is based at Bangkok’s Don Mueang International Airport.

The LockBit group has been working tirelessly over the past couple of years, using various tactics, methods, and procedures to improve its success rate.

They are known for using double and triple extortion methods, where they not only encrypt the data but also threaten to publish it unless a ransom is paid.

Nok Air data breach details shared online 

LockBit #ransomware group added NOK AIR (https://t.co/YgkyWPrqJA), to their victim list. They claim to publish the data by 15 March, 2023. Also Nok Air was earlier listed as a victim of ALPHV ransomware group.#Thailand #DarkWeb #DeepWeb #databreach #cybersecurity https://t.co/azX7KNOBUl pic.twitter.com/TOZhTD7zHz

— FalconFeedsio (@FalconFeedsio) February 28, 2023

The Thailand airline operator was in the cyber security news in November 2022, when the ALPHV/BlackCat ransomware gang listed it as a victim.

On November 20, 2022, the ransomware’s data leak website showcased screenshots of the stolen data, The Cyber Express reported.

The airline, which mainly operates domestic flights in Thailand from Bangkok’s Don Mueang International Airport, was targeted by the threat group that claimed to have exfiltrated more than 500GB of data.

The developers responsible for the ransomware-as-a-service (RaaS) group employ double and triple extortion techniques, acquired new technologies, and integrated various tactics, methods, and procedures (TTP) into their strategies.

After examining the published data that contained confidential information stored across numerous folders, documents, and spreadsheets, threat intelligence researchers at Cyble analyzed the material.

Upon scrutinizing the screenshots posted on the data leak website, we discovered some files named “refund to customers.ink,” “req invoice.pdf,” “refund.xlsx,” “DD SWOT ANALYSIS.ppt,” and other sensitive documents.

Airlines and ransomware attacks

Throughout the autumn of 2022, airlines were targeted by various attacks, including a distributed denial-of-service (DDoS) attack on U.S. airport websites that temporarily took down several web services.

A similar attack affected Jeppesen, a subsidiary of Boeing, on November 2, 2022. Jeppesen disclosed that this attack had the potential to affect the accuracy of some of its products and services, including the receipt and processing of notice to air missions that inform pilots of any potential hazards during flights.

Airports are also susceptible to attacks and are a significant repository of carrier and passenger information.

According to a Kaspersky advisory on air travel security, “Airport systems typically store not only travel document data but also payment information. This poses an issue not only for customers but also for the airport itself since modern data protection laws offer no leniency to organizations that are careless with data protection.”

Cybercriminals and the rise of ransomware-as-a-service (RaaS)

The rise of ransomware-as-a-service (RaaS) groups has made it easier for cybercriminals to launch ransomware attacks. They can rent the ransomware software from these groups rather than develop it themselves.

ALPHV, also known as BlackCat and Roberts, has been one such RaaS group active over the past couple of years.

It is not yet clear how Nok Air’s systems were breached, but it serves as a reminder of the importance of cybersecurity measures for businesses of all sizes.

Small and medium-sized businesses are often seen as easy targets for cybercriminals, as they may not have the same level of security measures in place as larger organizations.

Hackers target airlines and airports for various reasons, including financial gain, cyber espionage, disruption of operations, reputation damage, political motivation, and interconnectedness with other industries.

These organizations deal with a large amount of sensitive information, making them attractive targets for cybercriminals. It is essential that airlines and airports take measures to protect themselves from these threats to prevent potential damage to their reputation and operations.

As more businesses shift to digital operations, they must prioritize cybersecurity and invest in the necessary tools and technologies to protect their data.

This includes regular software updates, employee training on cybersecurity best practices, and working with cybersecurity professionals to conduct regular risk assessments and vulnerability scans.

The ransomware attack on Nok Air highlights the ongoing threat posed by cybercriminals, particularly ransomware-as-a-service groups like ALPHV and LockBit. Businesses must take cybersecurity seriously and implement robust measures to protect their data from these attacks.

Share this:

  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
  • More
  • Click to email a link to a friend (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)

Related

Tags: LockBit GroupNok Airransomware attack
Previous Post

Researchers Attribute Lazarus APT Group with Backdoor Payload WinorDLL64

Next Post

NoName Hits Japanese Organizations After Country Imposes Latest Sanctions on Russia

Ashish Khaitan

Ashish Khaitan

Ashish is a technical writer at The Cyber Express. He adores writing about the latest technologies and covering the latest cybersecurity events. In his free time, he likes to play horror and open-world video games.

Related Posts

Cinoshi Malware-as-a-Service
Firewall Daily

MaaS on Sale: Cybercrime Forum Selling Cinoshi Malware-as-a-Service for 2000 Rubles

by Vishwa Pandagle
March 26, 2023
E-learning Platform Moodle
Firewall Daily

Vulnerabilities Found in E-learning Platform Moodle, Users Urged to Update

by Ashish Khaitan
March 26, 2023
Explicit Online Content of Children
Firewall Daily

Removing Explicit Online Content of Children is a Global War

by Vishwa Pandagle
March 25, 2023
Rio Tinto Cyber Attack
Data Breach News

Rio Tinto Cyber Attack Puts Employee Information at Risk

by Ashish Khaitan
March 25, 2023
Team Insane PK Targets Indian Businesses
Dark Web News

Team Insane PK Targets Indian Businesses, Leaks Sensitive Data

by Vishwa Pandagle
March 25, 2023
Next Post
NoName Hits Japanese Organizations

NoName Hits Japanese Organizations After Country Imposes Latest Sanctions on Russia

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

I agree to the Terms & Conditions and Privacy Policy.

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Latest Issue is Out. Subscribe Now

Women in Cybersecurity

Download Now

CRIL


Follow Us On Google News

Never miss an update. Subscribe!

* indicates required

Top 10 Cybersecurity Jobs

Categories

About The Cyber Express

The Cyber Express

Cyber Security News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

Follow The Cyber Express

Contact

For editorial queries: [email protected]

For marketing, PR & media partnerships: [email protected]

For media kit and digitals sales: [email protected]

For Sponsorship/Event Partnership: [email protected]

For Conferences related information: [email protected]

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
555 North Point Center E
Alpharetta, GA 30022, USA.

Tel: (678) 578-8838

Events: +1 (678) 578-4140

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

Tel: (678) 578-8838

Events: +1 (678) 578-4140

Subscribe to Our Feed

RSS Feeds

Follow Us On Google News

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

No Result
View All Result
  • Firewall Daily
  • Business News
  • Cyber Essentials
  • Features
  • Cyber Security Magazine
  • Events
    • World CyberCon Middle East 2023
    •  Cyber Security Webinar

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.