You have 0 free articles left this month.
Register for a free account to access unlimited free content.
Powered by MOMENTUM MEDIA
lawyers weekly logo

Powered by MOMENTUMMEDIA

Breaking news and updates daily. Subscribe to our Newsletter
Advertisement

Exclusive: KillSec claims ransomware attack on Qld IT services firm Hexicor

Hackers have shared screenshots of customer folders, digital certificates, and a list of hashed passwords and backup data.

Exclusive: KillSec claims ransomware attack on Queensland IT services firm Hexicor
expand image

The KillSec ransomware gang has listed IT services firm Hexicor as a victim on its darknet leak site.

The hackers claimed the attack on 1 April, offering to sell the data allegedly stolen in the incident to either Hexicor itself or another bidder.

KillSec has not disclosed how much data it may have exfiltrated or how much it is offering to sell the data for.

“Company can pay for data deletion, and non-company related individuals may contact us to reach an agreement for data purchase,” KillSec said in its leak post.

What KillSec has disclosed are several screenshots illustrating the data allegedly stolen, including file listings of client folders, Mitel MiCollab backups, and databases of hashed passwords and other security data.

According to a countdown on the leak post, KillSec plans to publish the data within seven days.

KillSec emerged on the ransomware scene in October 2023 and rebranded as a ransomware-as-service operation in June 2024. It considers itself a “prominent hacktivist group operating in the cyber realm”.

“With a focus on both disruption and digital activism, KillSec embodies the complexities of modern cyber warfare, blending elements of activism with the darker facets of hacking culture,” it said.

Hexicor is just one of 14 victims listed by KillSec on 1 April, while the gang’s most recent Australian victim was Wendy Wu Tours, which was listed on 4 March. KillSec has claimed attacks on 199 victims since it was formed.

Hexicor is a Brisbane-based IT firm that offers cyber security, unified communications, and network services and employs staff across Queensland, South Australia, and the Northern Territory. The company boasts more than 1,500 business customers and more than 1,000 government customers.

Cyber Daily has reached out to Hexicor for comment on the incident but has yet to receive a response.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

You need to be a member to post comments. Become a member for free today!

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.