The ransomware group Lockbit claims to have stolen 78 GB of files from the Italian Revenue Agency (Agenzia delle Entrate) and added the government agency to the list of victims reported on its dark web leak site.
If the attack will be confirmed, it can represent one of the most severe incidents suffered by Italian government agencies. The Agenzia delle Entrate, or the Italian Revenue Agency, enforces the financial code of Italy and collects taxes and revenue. The agency provides several online services for Italian and non-Italian taxpayers.
At this time it is not unknown if the ransomware gang has already contacted the Italian government or the amount of the ransom it is demanding. The Lockbit ransomware gang gives 5 days to the Agency to pay the ransomware to avoid the leak of stolen data.
The gang has been active since at least 2019 and today it is one of the most active ransomware gangs.
The LockBit 3.0 operation is also using a new extortion model that allows threat actors to buy data stolen from the victims during the attacks. This means that someone could buy data of Italian taxpayers and use them for a broad range of financial scams.
Full article here https://securityaffairs.co/wordpress/133640/cyber-crime/lockbit-ransomware-italian-revenue-agency.html
#lockbit #ransomware #Italy #revenueservice #IRS #extortion #blog #yokdata