Trellix Source Code Breach Linked to RansomHouse Hackers

Post Views: 1

Cybersecurity Firm Trellix Under Siege: RansomHouse Hackers Claim Responsibility for Source Code Breach

Trellix, a global cybersecurity leader serving Fortune 100 clients worldwide, has been breached by the notorious RansomHouse group, who claim to have accessed the company’s source code repository.

Background

Trellix confirmed the breach on May 1st, stating that it was investigating the incident. “We have identified unauthorized access to a portion of our source code repository,” said the company. “Upon learning of this matter, we immediately began working with leading forensic experts to resolve it.”

The Attack

RansomHouse, a cybercrime group specializing in data extortion, claimed responsibility for the breach on May 7th, publishing screenshots indicating access to Trellix’s appliance management system.

According to RansomHouse, the intrusion occurred on April 17 and resulted in data encryption. The group lists victims on a darkweb portal and leaks or sells data stolen from corporate networks.

Trellix has assured customers that its source code release or distribution process was not affected, nor has the source code been exploited. However, the exact nature and extent of the breach remain unclear.

Implications

The breach highlights the evolving threats in the cybersecurity landscape and the need for organizations to invest in robust security measures to protect against emerging threats.

RansomHouse’s toolkit includes advanced encryption utilities, such as Mario, which performs a dual-encryption pass with two keys on target files, and MrAgent, which automates the deployment of encryptors on VMware ESXi hypervisors.
Trellix’s investigation is ongoing, and the company promises to share more details once they become available.
In related news, another prominent cybersecurity firm, Instructure, recently confirmed a data breach, with the ShinyHunters group claiming responsibility.

As the cybersecurity landscape continues to evolve, organizations must stay vigilant and invest in robust security measures to protect against emerging threats.