Travelex warns customers of phone scam threat in wake of ransomware attack

Members of the public who have found themselves out-of-pocket or inconvenienced by the ongoing problems at Travelex after it suffered a ransomware attack on New Year’s Eve, are being warned to watch out for email and phone scammers taking advantage of … Continue reading Travelex warns customers of phone scam threat in wake of ransomware attack

Travelex says ransomware recovery is underway two weeks after global blackout

The financial exchange Travelex said Monday it has restored some of its digital capabilities for foreign currency trades, nearly two weeks after a ransomware attack forced staff to rely on pens and paper. Travelex said its making “good progress” in its recovery from a security incident that, on Dec. 31, forced the company to suspend online services, including its app and internal email systems. Ransomware attackers used a malicious software strain called Sodinokibi, or REvil, reportedly to demand a fee of $6 million (£4.6 million) to release the affected data. Now, Travelex said, it is restoring internal processes and issuing refunds to customers “where appropriate,” according to Reuters. Hackers previously told the computer security blog Bleeping Computer they were in negotiations with Travelex about the ransom payment. Travelex did not respond to a request for comment from CyberScoop Monday. The company, a subsidiary of United Arab Emirates-based Finablr, operates 1,200 locations […]

The post Travelex says ransomware recovery is underway two weeks after global blackout appeared first on CyberScoop.

Continue reading Travelex says ransomware recovery is underway two weeks after global blackout

Travelex still down two weeks after Sodinokibi ransomware infection

Travelex is still struggling to get back on its feet after it was infected with Sodinokibi ransomware on New Year’s Eve, but the foreign exchange firm says the hack compromised no customer data. Two weeks ago, Travelex learned it had fallen victi… Continue reading Travelex still down two weeks after Sodinokibi ransomware infection

Travelex extorted by ransomware gang, services still offline a week after the hit

On the last day of 2019, foreign exchange company Travelex was hit by cyber attackers wielding the Sodinokibi (aka REvil) ransomware. More than a week later, the company’s websites and online services are still offline despite the company’s… Continue reading Travelex extorted by ransomware gang, services still offline a week after the hit

Sodinokibi ransomware plagues Travelex currency exchange as investigation continues: report

A days-long ransomware attack against Travelex has forced the British currency exchange to suspend many of its online operations as the United Kingdom’s Metropolitan police investigate the incident. The company said on Dec. 31 it would suspend all of its online services, including its app and internal email systems, to mitigate a cyberattack it detected that day. Two days later, Travelex contacted the Metropolitan police, seeking help to resolve the situation. Normal operations hadn’t been restored, the BBC reported Tuesday, with hackers reportedly demanding a $6 million ransom (£4.6 million) to unlock the affected data. Travelex did not respond to a request for comment Tuesday. The firm’s website was still offline at press time, citing planned maintenance. “The company’s network of branches continues to provide foreign exchange services manually,” the firm said in a Jan. 2 tweet. Travelex, a subsidiary of United Arab Emirates-based Finablr, operates 1,200 locations in 70 […]

The post Sodinokibi ransomware plagues Travelex currency exchange as investigation continues: report appeared first on CyberScoop.

Continue reading Sodinokibi ransomware plagues Travelex currency exchange as investigation continues: report