REvil ransomware gang attempts to extort Apple

The notorious REvil ransomware gang is currently trying to extort tech giant Apple over stolen product blueprints. Apple has been given until May 1 to pay $50 million, otherwise, the cybercriminals will leak the data on their platform.

 

It appears that Apple is among multiple companies that the REvil (also known as Sodinokibi) ransomware gang is trying to extort, after what appears to be a successful hack of a Taiwanese company Quanta Computer Inc. Quanta is one of Apple’s major suppliers that mostly works with Macbooks. Among its other customers are Facebook, Microsoft, Dell, Lenovo, and Google’s parent company Alphabet Inc. It appears that REvil was able to infiltrate Quanta’s network and steal certain information, though while Quanta has acknowledged the attack, the extent of it is not known, nor is there information about how exactly the attack happened.

“Quanta Computer’s information security team has worked with external IT experts in response to cyberattacks on a small number of Quanta servers,” Quanta said in a statement to Bloomberg. “We’ve reported to and kept seamless communications with the relevant law enforcement and data protection authorities concerning recent abnormal activities observed. There’s no material impact on the company’s business operation.”

According to reports, since Quanta refused to pay the ransom to REvil, the cyber gang turned directly to Apple with their demands. The tech giant has reportedly been given until May 1 to pay $50 million. Otherwise, all stolen data will be leaked.

“Our team is negotiating the sale of large quantities of confidential drawings and gigabytes of personal data with several major brands,” the REvil operators wrote, per a report by the Record. “We recommend that Apple buy back the available data by May 1.”

Apple has said it’s looking into the incident but has not provided a statement. It’s doubtful, however, that they will give in and pay the requested $50 million. REvil is a group that usually keeps good of their promise to post stolen data. They have already started posting documents on their site, including product schematics for what seems to be Macbooks and Apple Watches, though confirming their authenticity is difficult. The group has also threatened to post new stolen documents every day unless the ransom is paid.