FlagThis

Ascom, a Swiss global solutions provider specializing in healthcare and enterprise communication systems, has confirmed a cyberattack on its IT infrastructure. The attack, suspected to be carried out by the Hellcat group, exploited vulnerabilities in Jira servers. The company revealed that hackers breached its technical ticketing system.

The Hellcat group claimed responsibility, stating they stole approximately 44GB of data potentially impacting all of Ascom's divisions. Hellcat hackers are known for using compromised credentials to infiltrate Jira systems, leading to data breaches in multiple organizations. Security experts advise implementing multi-factor authentication, regular security audits, prompt patching, and employee training to mitigate such attacks.

ImgSrc: doingfedtime.co

References :

• Sam Bent: Ascom Hit by Cyberattack: Hellcat Group Exploits Jira Server Vulnerabilities
• The DefendOps Diaries: HellCat Hackers Exploit Jira: A Global Cybersecurity Threat
• BleepingComputer: Hellcat hackers go on a worldwide Jira hacking spree
• securityaffairs.com: Security Affairs Article about Ransomware Group Claims Attacks on Ascom

Classification:

• HashTags: #Ransomware #Healthcare #Cyberattack
• Company: Ascom
• Target: Ascom
• Attacker: Hellcat
• Product: Jira
• Feature: data theft
• Malware: Jira exploits
• Type: Ransomware
• Severity: Major