Kmart, Latest Victim of Egregor Ransomware – Report

[silversurfer]

Retail stalwart Kmart has suffered a ransomware attack at the hands of the Egregor gang, according to a report.
 
The incident has encrypted devices and servers connected to the company’s networks, knocking out back-end services, according to BleepingComputer. The outlet obtained the purported ransom note that claims to have compromised Kmart’s Windows domain.
 
The company was purchased by Transformco in 2019 – and the holding company is apparently impacted as well. The 88sears.com site, used internally, is offline, which is a state of affairs that employees confirmed to the outlet was due to the ransomware attack.
 
The struggling chain’s retail stores appear to be operating normally, according to the report. Little else is known about the situation for now, and Kmart has not confirmed a cyberattack. It did not immediately return a request for comment.
 
“That’s an early Christmas surprise for Kmart’s new owners, Transformco,” said Colin Bastable, CEO of security awareness training firm Lucy Security, via email. “There is never a good time for a ransomware attack, but the run up to the Christmas shopping period is a bad time for Kmart to be hit. My advice to CISOs: add ‘P.S. Please give me some cybersecurity awareness training budget’ to your Dear Santa letter, and hope that he comes early this year.”

Read more: https://threatpost.com/kmart-egregor-ransomware/161881/