India’s Securens security firm got struck by the LockBit gang

A new company had been added to the LockBit ransomware gang’s list of victims after its operators claimed that they hacked into the servers of an Indian e-surveillance security company – Securens.

Securens is a leading provider of a wide range of security surveillance systems and in-camera audit services in India, including alarm monitoring services, in-camera virtual guard patrol, perimeter intrusion detection systems, instantly detecting PPE non-complicacies, virtual safety and security SoP compliance audits, virtual operational SoP compliance audits, and auto health check of surveillance equipment.

 

Securens was given by the LockBit gang until March 27 before their data gets published.

 

On the ransomware gang’s leak site, the Indian e-surveillance security company was given only until March 27 before their data gets leaked to the public if they would not cooperate with the ransom demands.

No details are shared about how much ransom the victimised company had been required to pay.

However, the company seemed to either fail or refuse to cooperate before the deadline as LockBit finally published its alleged stolen information. The leaked data from Securens are employee ledgers, customer addresses, bank documents, audit documents, and GST data.

As of this article, Securens’ official website is still operational. The company has yet to release any statement or comment regarding the alleged hack from the LockBit ransomware gang. Thus, the claimed cyberattack is still unconfirmed.

LockBit remains one of the most active and prolific ransomware groups in the cybercriminal landscape. One of the group’s most recent activities was claiming an attack against an office supplies distributor, Essendant, a US manufacturing facility that produces parts for SpaceX, Maximum Industries, and a Portuguese water utility, Águas e Energia do Porto.

The ransomware group has also been actively upgrading their attack tactics, one of which includes utilising evasion tradecraft to bypass the Mark of The Web (MOTW) protection feature.

LockBit’s continued and rising threat among organisations and companies worldwide indicates the need for an equivalent effort in upgrading security measures in infrastructures and servers.