Seaview Resort Khao Lak Targeted by Lockbit3 Ransomware Group

Seaview Resort Khao Lak, a luxury resort located on Nang Thong Beach in Thailand, has been targeted by the ransomware group Lockbit3. The attack was announced on the group's dark web leak site. The resort operates in the Hospitality sector and is known for its extensive stretch of fine sands, emerald blue waters, and verdant mountainous background.

Company Information

Seaview Resort Khao Lak offers a range of accommodation options, including garden view rooms and pool villas, along with a stunning beach and various activities and facilities for guests. The resort is located near Phuket International Airport and is a popular base for exploring the Similan and Surin island groups and neighboring national parks.

Vulnerabilities and Targeting

Ransomware attacks on the hospitality sector have been increasing in recent years, with many resorts being particularly vulnerable due to their access to sensitive guest information. In 2023, there was an unprecedented surge in ransomware attacks, with the average monthly number of reported victims reaching 31, up from the 2022 average of 20.

The Lockbit3 ransomware group has been active in targeting various industries, including hospitality, and has been known to steal data before decrypting, a technique called double-extortion. The group often threatens to sell or leak exfiltrated data or authentication information if the ransom is not paid.

Mitigation Strategies

To mitigate the risks of ransomware attacks, organizations should implement solutions that can detect the presence of malware and ensure Device Hardening measures are in place. Additionally, companies should consider purchasing cyber insurance, which can protect against ransomware, fraud, and other types of data breaches.

Sources

• Las Vegas resorts 'on notice' after major ransomware attack hits MGM, says cybersecurity expert - CNBC. https://www.cnbc.com/2020/02/20/las-vegas-resorts-on-notice-after-major-ransomware-attack-hits-mgm.html
• Ransomware infected systems at a luxury hotel locking guests in and out of the rooms.
• Ransomware Tracker 2024: Recent Ransomware Attacks - Spin.AI. https://spin.ai/ransomware-tracker/
• Luxury Austrian Hotel Hit by Ransomware Attack - New Net Technologies. https://www.newnettechnologies.com/luxury-austrian-hotel-hit-by-ransomware-attack.html
• Ransomware and PII: Protecting Your Resorts and Guests - Resort Trades. https://resorttrades.com/ransomware-and-pii-protecting-your-resorts-and-guests/