Blue Yonder says some customers restored as ransomware gang boasts of attack

Attribute	Details
Threat Actors	Termite Ransomware Gang
Campaign Overview	Ransomware attack on Blue Yonder, data theft, disruption of services for customers
Target Regions	Global, supply chain companies, supermarkets, Starbucks, Réunion (government)
Methodology	Data exfiltration, ransomware deployment, stealing emails, company documents
Product Targeted	Blue Yonder software systems (supply chain management)
Malware Reference	Termite ransomware, possible ties to Babuk ransomware family
Tools Used	Custom ransomware code, data exfiltration tools, ransomware deployment scripts
Vulnerabilities Exploited	Supply chain vulnerabilities, operational and infrastructure weaknesses
TTPs (Tactics, Techniques, Procedures)	Data stealing, ransomware deployment, exfiltration over large-scale infrastructure attacks
Attribution	Termite ransomware gang, previously linked to Babuk ransomware code
Recommendations	Strengthen supply chain security, collaborate with cybersecurity experts, implement robust ransomware protection protocols
Source	The Record

Read full article: https://therecord.media/blue-yonder-cyberattack-customer-systems-returning

Disclaimer: The above summary has been generated by an AI language model