Spanish Railway System Is The Latest Victim Of Ransomware Attack

The Spanish Railway system or its infrastructure is the latest victim to the crypto ransomware group REvil that attacked it and claimed to have stolen more than 800 GB data, as we are reading in our latest cryptocurrency news today.

The crypto-ransomware group REvil, managed to steal 800 GB of data from the Spanish Railway system after a successful attack that was deployed on their infrastructure. According to El Espanol, the authorship of the attack belongs to the popular ransomware group after they published a post on the darknet website of ReVil back on July 22 and boasted of successfully attacking another victim.

The cybercriminals claimed to have gathered 800 GB in data from the ADIF servers but it is not confirmed how they managed to breach the security of the railway system managed based in Madrid. REvil didn’t explain any further and didn’t give any information on which kind of data they stole but a screenshot by the gang on their official darknet website shows files that the files contain personal data, contracts, letters and account information of ADIF.

The report stated that the ransomware gang claimed to have the capabilities to keep downloading the data from the ADIF systems which suggest that the attack is still underway because of the vulnerability that wasn’t patched so far if they don’t pay for the ransom which is unknown as of press time. However, the state-owned company issued a comment:

“At no time has the infrastructure been affected, always guaranteeing the proper functioning of all our services. Adif, aware of being the manager of a critical infrastructure such as the exploitation of the railway network, considers cybersecurity as one of the pillars of comprehensive security.”

ReVil also launched other attacks targeting three companies in Canada and the United States. They even leaked data from two of the companies and threatened to expose all kinds of sensitive data. The gang has previously led sensitive documents that they were able to steal from the US-based robotics company and according to an official blog post from the gang on June 11, the team started leaking confidential data that belonged to Symbotic LLC.