Maze Ransomware Group Announces New Extortion Terms and Names Alleged Victims
Summary
Maze said it would name alleged victims within three days, require contact within 72 hours, and publish their data after ten days without successful negotiations. Its list included Xerox and LG Electronics.
Key points
- Maze published a statement on its Tor hidden service on July 9, 2020, describing new operating terms amid the pandemic and economic crisis.
- The group said it would announce alleged successful attacks and name victims within three days.
- Maze demanded that victims begin negotiations within 72 hours of an attack.
- The group threatened to publish ransomed data after ten days if negotiations failed.
- Maze said it would contact victims’ partners, clients, and regulators when releasing data to increase pressure.
- The announcement named organizations including Xerox and LG Electronics, but the article attributes the compromise claims to Maze. The claims are not independently confirmed in the article.
Article Details
- Event Type
- Maze ransomware operators issued a press statement outlining revised victim-negotiation and data-publication terms.
- Impact
- The operators alleged that named organizations had been compromised and threatened to publish their data if negotiations did not succeed within ten days. They also said they would contact victims’ partners, clients, and regulators to increase reputational and business harm.