KillSec Ransomware Strikes Farmacia Cofar in Chile
Ransomware Attack on Farmacia Cofar by KillSec
Farmacia Cofar, a leading pharmacy chain in Chile, has allegedly been targeted by a ransomware attack orchestrated by the notorious KillSec group. The breach, discovered on January 15, 2025, has sparked significant concerns about the security of healthcare-related entities that depend heavily on digital platforms for their operations.
About Farmacia Cofar
Farmacia Cofar stands as a prominent online pharmacy in Chile, specializing in chronic and specialty treatments. The company is recognized for its dedication to accessibility and convenience, offering home delivery services across continental Chile. This service is particularly advantageous for patients with mobility issues or those who favor the ease of online shopping. Cofar's extensive product range includes prescription medications, over-the-counter drugs, health supplements, and personal care items. The pharmacy prioritizes expert guidance and customer service, ensuring that patients receive the necessary support for managing chronic conditions.
Attack Overview
The ransomware attack targeted Cofar's online platform, cofar.cl, which is vital for their operations. KillSec claims to have exfiltrated sensitive data, highlighting the vulnerabilities faced by healthcare entities in the digital age. The attack underscores the risks associated with the increasing reliance on online systems to manage sensitive patient and operational data. The breach has potentially compromised the personal and medical information of Cofar's customers, posing a significant threat to their privacy and security.
About KillSec
KillSec is a ransomware group that emerged in 2023 and has quickly become a significant player in the cybercrime landscape. The group employs double extortion tactics, stealing data before encryption and threatening to leak it. KillSec distinguishes itself by targeting various industries, with a notable focus on healthcare entities. The group operates under a ransomware-as-a-service model, expanding its reach and impact. KillSec's operations are characterized by their prohibition of attacks on Russian and Ukrainian targets, suggesting possible origins in these regions.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!