HELLCAT Ransomware Group Strikes Again: Four New Victims Breached via Jira Credentials from Infostealer Logs

Summary: The HellCat ransomware group has exploited stolen Jira credentials from infostealer malware to target four organizations: HighWire Press, Asseco, Racami, and LeoVegas Group. Hudson Rock reports that these attacks follow a pattern established by previous incidents, emphasizing the severe implications for the affected entities due to sensitive data exfiltration and the threat of ransom demands. Organizations are urged to adopt preventive measures to protect against such breaches that leverage infostealer malware.

Affected: HighWire Press, Asseco, Racami, LeoVegas Group

Keypoints :

• The attacks were enabled by compromised Jira credentials obtained through infostealer malware.
• HellCat threatens to leak sensitive data unless ransom demands are met, risking reputational damage and regulatory scrutiny.
• Preventive steps recommended include deploying EDR tools, securing Jira instances with MFA, and educating employees about phishing threats.