Klue Hack Takes a Troubling Turn as New Extortion Threats Emerge

Market research provider Klue is navigating a complex and evolving cybersecurity crisis after a recent hack exposed sensitive customer data. The company has been in communication with the hacking group responsible, known as Icarus, which claims to be deleting the stolen data. However, this development has been overshadowed by a new and disturbing twist: a second group of hackers is now threatening to extort Klue's customers directly. According to Klue, Icarus alerted the company to this new threat, stating that the second group has obtained samples of customer data and is demanding ransom payments.

The situation is particularly concerning given the list of affected companies, which includes notable names such as Gong, Jamf, and LastPass. Klue has advised its customers not to pay the ransom, suggesting instead that they request a random sample of data as proof that the hackers possess what they claim. The initial breach occurred when hackers exploited a 2022 third-party credential to gain access to Klue's systems, ultimately stealing customers' authentication keys and logging into their cloud and database services. As the situation continues to unfold, Klue's customers are facing increased uncertainty and risk, highlighting the need for robust cybersecurity measures to protect against such threats.

The emergence of a second group of hackers adds a layer of complexity to the incident, underscoring the importance of vigilance and swift action in responding to cyberattacks.

Source: TechCrunch