MSI Confirms Breach as Ransomware Gang Claims Responsibility

MSI has confirmed it suffered a data breach after a ransomware gang claimed it stole files from the PC maker. The company published a Taiwanese stock exchange filing(Opens in a new window) about experiencing a “cyber attack,” although the company is thin on details.  

“After detecting some information systems being attacked by hackers, MSI’s IT department has initiated information security defense mechanism and recovery procedures,” the PC maker said. The company also reported the incident to authorities. 

(Credit: MOPS)

MSI didn’t immediately respond to a request for comment, making it unclear whether customer data is affected. But in the stock exchange filing, the PC maker says it anticipates the breach having “no significant impact” on its financials or operations. 

A new ransomware group called Money Message claims it breached the PC maker to steal the company’s source code, including the framework for the BIOS used in MSI products.

The leak site for the ransomware group Money Message.

Money Message posted screenshots of the stolen files on the group’s dark web site. The ransomware gang is demanding MSI pay $4 million or else it’ll leak the stolen data next week, according(Opens in a new window) to BleepingComputer, citing chats Money Message made with a victim representative. 

Money Message seems to have only emerged last month. The group has targeted Windows and Linux computers and will try to encrypt shared network resources, according(Opens in a new window) to cybersecurity firm Cyble. The company also uncovered evidence Money Message will first try to identify and steal the admin credentials for an IT network before spreading their ransomware attacks. 

As for MSI, the PC maker says in the stock exchange filing that it’s working to bolster its cybersecurity for company systems.