APT73 Ransomware Attack Disrupts Botiga's Operations in Uruguay
Ransomware Attack on Botiga: APT73 Strikes Uruguayan Retail Platform
Botiga, a notable online retail platform based in Montevideo, Uruguay, has recently fallen victim to a ransomware attack orchestrated by the cybercriminal group APT73. Specializing in fitness and wellness products, Botiga offers a wide range of items, including fitness supplements, yoga equipment, and gym apparatus. The company, founded in 2016, operates with a small workforce and has established itself as a key player in Uruguay's e-commerce sector, providing over 10,000 products to its customers.
The attack, claimed by APT73 on their dark web leak site, involved the deployment of BASHE Ransomware. This sophisticated strain is known for its encryption capabilities and stealthy infiltration methods. Upon breaching Botiga's network, the ransomware encrypted critical data, disrupting operations and rendering essential information inaccessible. The attackers have demanded a substantial ransom in cryptocurrency, threatening to release sensitive customer data if their demands are not met.
APT73, a newly emerged ransomware group, surfaced in late April. The group distinguishes itself by adopting an "APT" designation, typically associated with state-sponsored hacking groups, to project a sophisticated image. Their operational model mirrors that of the notorious LockBit group, employing similar tactics such as double-extortion strategies. Despite their amateurish signs, such as lacking active mirrors on their data leak site, APT73 has quickly targeted multiple victims across various sectors, including academia and healthcare.
The vulnerabilities that made Botiga a target include its relatively small size and the critical nature of its operations, which may not have been adequately fortified against advanced cyber threats. The retail sector, particularly smaller e-commerce platforms, often faces challenges in maintaining effective cybersecurity measures, making them attractive targets for ransomware groups like APT73.
Botiga is currently collaborating with cybersecurity experts to assess the breach's extent and restore its systems without succumbing to the ransom demands. This incident underscores the persistent threat posed by advanced persistent threat groups and highlights the importance of vigilant cybersecurity practices, especially for companies operating in competitive and vulnerable sectors.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!