The operators of the DopplePaymer ransomware had infected the network of one of NASA's IT contractors, Digital Management Inc. (DMI).
DMI's customer list includes several Fortune 100 companies and many government agencies, among them.
The DopplePaymer operators posted 20 archive files on a dark web portal the group was operating.
The archives include everything from HR documents to project plans.
The DopplePaymer gang also posted a list of 2,583 servers and workstations that were part of DMI's internal network, and which they had encrypted and held for ransom.
Source: https://www.zdnet.com/article/ransomware-gang-says-it-breached-one-of-nasas-it-contractors/
"id": "DMI1305123",
"linkid": "dmi-digital-management-inc-",
"type": "Ransomware",
"date": "06/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
Join the conversation