Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Malware & Threats

MSI Confirms Cyberattack, Issues Firmware Download Guidance

Tech giant MSI confirms a cyberattack that resulted in system disruptions and possible exposure to firmware image manipulations.

Ransomware Report

Technology giant Micro-Star International (MSI) has confirmed it fell victim to a cyberattack that resulted in system disruptions and possible exposure to firmware image manipulations.

In a notice posted online, MSI described the incident as “network anomalies” and said it immediately activated relevant defense mechanisms after identifying the intrusion.

“MSI recently suffered a cyberattack on part of its information systems. Currently, the affected systems have gradually resumed normal operations, with no significant impact on financial business,” the company added.

The computer maker shared no details on the type of cyberattack that it suffered and made no mention of any type of data being stolen during the intrusion.

However, MSI’s notification came only days after a ransomware group known as ‘Money Message’ boasted on its leak site about hacking into the company’s infrastructure.

The group claims to have gained access to internal MSI databases, private keys, source code, and BIOS firmware. Money Message also claims to have all the tools it needs to create malicious BIOS images and sign them.

While not directly mentioning any source code theft, MSI’s notification appears to confirm that the hackers might have had access to firmware images.

Advertisement. Scroll to continue reading.

“MSI urges users to obtain firmware/BIOS updates only from its official website, and not to use files from sources other than the official website,” the notification reads.

Headquartered in New Taipei City, Taiwan, MSI is one of the world’s largest providers of computer hardware and products, including laptops, desktops, servers, motherboards, graphics cards, peripherals, and car infotainment products.

Related: Crown Resorts Investigating Ransomware Data Theft Claims

Related: Ransomware Will Target OT Systems in EU Transport Sector: ENISA

Related: Ransomware Gang Publishes Dat Stolen From Royal Dirkzwager

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Ransomware

A SaaS ransomware attack against a company’s Sharepoint Online was done without using a compromised endpoint.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.

Malware & Threats

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently...

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Ransomware

Several major organizations are confirming impact from the latest zero-day exploits hitting Fortra's GoAnywhere software.

Data Breaches

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack.