Garmin: He allegedly ransomed the ransomware attack

The technology company allegedly used the cyber-management company IR network to mediate the payment of the ransom from the virus attack WastedLocker, instead of paying them directly.

Σat the end of July, many of its online services Garmin they fell. The cause was what was initially described as a cyber attack, but it turned out to be an attack. ransomware.

The virus is said to have been carried by the strain WastedLocker and the group behind the attack was thought to be the Russian organization Evil Corp. Now it sounds that the Garmin decided to pay the ransom, but that may not be the end of Garmin's problems because of the US sanctions list.

As he says Sky News, Garmin acquired the encryption key for its systems last week and then restored its services. However, there is no official explanation for how the company managed to secure the key. Sources who remain anonymous on Sky claim that the Garmin approached a cyber-management company to undertake to pay the ransom on its behalf, but the company itself denied this. The problem is that, the Evil Corp is on the US sanctions list, which means that conciliation is prohibited in any case.

Garmin apparently insisted and turned to a second cyber-management and mediation company, Arete IR. Arete is recorded as disputing the allegation that the WastedLocker strain was developed by Evil Corp, stating that the data is insufficient. Arete IR therefore proceeded to pay the ransom on its behalf Garmin and secured the key to decryption.

The Sky News called on both Garmin and Arete IR to deny payment, but neither responded. A Arete IR representative explained that, “Arete has a contractual obligation of confidentiality to all its customers and therefore can not discuss any identity or interconnection of its customers.In other words, even if they did manage the ransom, it is up to Garmin to confirm the settlement, as Arete has no right to do so.

The amount demanded by the hackers has not been confirmed, but it is estimated to be close to $ 10 million. If Garmin does not intend to issue an official announcement we may never know the amount it eventually paid. The company may also have to face a thorough investigation into the case by the US government if it turns out that identified individuals or the group Evil Corp is confirmed behind the ransomware attack and the conciliation took place.

Source