Editor: Left and right
Recently, the RansomHouse ransomware gang claimed to have stolen 450 GB of data from semiconductor giant AMD and added it to the ransomware gang’s dark web leak website:
RansomHouse began operations in December 2021, and is similar to the general Unlike other ransomware groups, this gang claims not to use ransomware in attacks and does not encrypt data after invading the network, choosing instead to focus on data theft.
RansomHouse claimed that one of its "partners" hacked into AMD's network as early as a year ago, eventually stealing more than 450GB of data on January 5, 2022.
RansomHouse said they have not contacted AMD to negotiate a ransom demand because the data would be more valuable by selling it to other entities or hackers:
"No, we have not contacted AMD because our partners believe it is a waste of time: Sale The data is worth more than waiting for AMD representatives to respond to the vast bureaucracy involved.”
The allegedly stolen data includes AMD corporate research and financial documents, which are being analyzed by RansomHouse to determine the value.
Some of the files currently released by RansomHouse may be internal network information collected during the reconnaissance phase. One of the files, all_computers.csv, contains a list of more than 77,000 computers hosted on AMD's internal network. Another leaked file, sample_passwords.txt, contains a list of weak credentials for AMD users, such as "password", "P@ssw0rd", "amd!23", and "Welcome1".
AMD stated that it is aware of the matter and is currently investigating.
Source of information: bleepingcomputer
Please indicate the source and link to this article when reprinting
Knowledge increases daily
Code audit
As the name suggests, it is to check the security flaws in the source code and check whether the program source code exists. Security risks, or coding irregularities, pass Automated tools or manual review are used to inspect and analyze the program source code one by one, discover security vulnerabilities caused by these source codes, and provide code revision measures and suggestions.
