The day after Québec’s Fête nationale, a criminal group claimed an attack against Lareau courtiers d’assurances. Security experts worry that this attack could be used to target other Québec companies.
On June 25, the Conti ransomware group publicized attacks against several new victims. Among them was the company headquartered in Napierville.
The criminals published a list of devices belonging to the company as well as a list of encrypted passwords. These use the standard encryption of the Windows operating system. According to our analysis, some of them were fairly easy to crack. For now, no personal data has been released on the ransom group’s website.
Once they have access to a network, these groups usually deploy ransomware. This is a program that encrypts data and renders it unusable. A key is needed to recover it. To increase pressure on their victims, they usually threaten to publicly release the information they have stolen.
Lareau has 8 branches in Québec and a team of more than 180 professionals. According to its website, Lareau offers cyber-risk protection.
Targeting a company offering this type of coverage is “the perfect recipe,” according to Steve Waterhouse, a former cyber defence officer in the Canadian Armed Forces. According to the security expert, this attack could help the attackers target their next victims. It allows them to adjust their ransom demands based on the victims’ ability to pay. “It’s brilliant. It lets them do a roaring trade,” he adds.
Lareau did not respond to our requests for information. For Mr. Waterhouse, companies are very reluctant to talk about these incidents because they fear for their reputation. “Security through obscurity should no longer have a place,” he laments.
Photo credit: begemot_dn - CC BY-NC license
