‘Dozens’ of organizations had data stolen in Oracle-linked hacks

Google security researchers say that hackers have stole data from “dozens of agencies” by targeting corporate executives with extortion emails, one of the first signs that hacking can be far -reaching.

Tech Giant said in a statement shared with TechCrunch on Thursday that Clop extortion gang used multiple protection weaknesses in Oracle’s e-business suit software to steal a significant amount of data from the affected companies.

Oracle’s e-Business Software companies allows them to run their operations, such as storing their customer data and their staff’s human resources file.

Google says A related blog post The hacking campaign is aimed at Oracle customers that the hacks are at least three months before the first detection of July 10.

Oracle acknowledged at the beginning of this week that the hackers were behind the extortion expedition Is still objectionable to its software Corporate Executive and to steal personal information about their companies. A few days ago, Oracle Chief Security Officer Rob Duhart claimed in the same post – since scrubod was scrubed – the extortion campaign was associated with the weakening previously identified in Oracle in July, which the hacks were finished.

However Protection consultation Published on the weekend, Oracle said that a vacuum was buggy because there was no time to fix Oracle’s bug, as it was already absorbed by hackers-“The user’s name and password can be exploited through a network without need for password.”

Russia-connected Clop Ransomwear and extortion gangs have made a name for themselves in recent years to promote mass-hacking, often involved in the abuse of unknown weakness to the software seller to steal corporate and customer information. It includes the file transfer tools operated by Clew, MovieAnd Goan is somewhereWhich companies use the internet as a way to send sensitive corporate data.

Google’s blog post includes email addresses and other technical details that network defenders can use to look for extortion emails and other hints that their oracle systems may be compromised.