Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Threat actors have claimed a cyber attack on an Australian boat builder and seller, allegedly having exfiltrated over 100 gigabytes of data.
Malibu Boats Australia is a boat builder and seller specialising in watersports towboats, which are ideal for wakeboarding and other water activities. The company has a 30-year history of Australian manufacturing and has dealers around the country.
Malibu was listed on the dark web leak site of the Qilin ransomware gang on 29 October. The threat group claimed to have stolen 160 gigabytes of data, comprising 148,538 files.
While the threat actor said the listing has been “publicated” or published, the link to access data is inaccessible, and no sample or commentary on the incident was provided.
While Qilin specified Malibu Boats Australia, the wider Malibu Boats company was founded in California in 1982 and has become the “largest manufacturer of watersports towboats”, with over a third of the worldwide market share. The nature and origin of the data are still unknown.
Cyber Daily has reached out to Malibu Boats Australia for more information.
The Qilin ransomware-as-a-service operation was first observed in August 2022 and has claimed 698 victims since, making it one of the most active ransomware groups currently active.
As a ransomware-as-a-service operation, Qilin hires out its ransomware to affiliates in return for a cut of any ransom payment.
Qilin’s most recent Australian victim was the Wyong Rugby League Club, which was listed by the hackers on 17 August.
“Wyong Rugby League Club, Australia, is a network of 12 organisations, each offering entertainment, recreational and dining opportunities and promoting membership of their club. It is the membership card that opens up a full range of entertainment for its holder. And these cards have become the company’s weakest point,” Qilin said in its leak post.
“The company promised its customers that all this information would be completely confidential and would never be made public. And now this data, several thousand lines, has become available to everyone.”
Be the first to hear the latest developments in the cyber industry.