corporacion nacional de telecomunicaciones

Ecuador's state-run Corporación Nacional de Telecomunicación (CNT) suffered a ransomware attack that disrupted its business operations, the payment portal, and customer support.

CNT website displayed an alert warning that they suffered an attack and that customer care and online payment are no longer accessible.

The attack also affected the care processes in its Integrated Service Centers and Contact Center.

The threat actors exfiltrated 190GB+ of their file including contact lists, contracts, and support logs.and threated to leak all the stolen data if the ransom not paid.

Source: https://www.bleepingcomputer.com/news/security/ecuadors-state-run-cnt-telco-hit-by-ransomexx-ransomware/

TPRM report: https://www.rankiteo.com/company/corporacion-nacional-de-telecomunicaciones

"id": "cor224326822",
"linkid": "corporacion-nacional-de-telecomunicaciones",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Telecommunications',
                        'location': 'Ecuador',
                        'name': 'Corporación Nacional de Telecomunicación '
                                '(CNT)',
                        'type': 'State-run Telecommunications Company'}],
 'data_breach': {'data_exfiltration': '190GB+',
                 'type_of_data_compromised': ['contact lists',
                                              'contracts',
                                              'support logs']},
 'description': "Ecuador's state-run Corporación Nacional de Telecomunicación "
                '(CNT) suffered a ransomware attack that disrupted its '
                'business operations, the payment portal, and customer '
                'support. The attack also affected the care processes in its '
                'Integrated Service Centers and Contact Center. The threat '
                'actors exfiltrated 190GB+ of their files including contact '
                'lists, contracts, and support logs, and threatened to leak '
                'all the stolen data if the ransom was not paid.',
 'impact': {'data_compromised': ['contact lists', 'contracts', 'support logs'],
            'operational_impact': 'Disruption of business operations, payment '
                                  'portal, and customer support',
            'systems_affected': ['website',
                                 'customer care',
                                 'online payment',
                                 'Integrated Service Centers',
                                 'Contact Center']},
 'motivation': 'Ransom',
 'ransomware': {'data_exfiltration': '190GB+'},
 'title': 'Ransomware Attack on CNT',
 'type': 'Ransomware'}