MSI confirms cyber attack, hackers claim to have stolen source code

MSI recently confirmed that it had been the victim of a cyber attack and says that daily activities are now restarting. The company does not say whether any data has been stolen. A ransomware group claims to have attacked MSI and stolen source code.

It company says to have activated ‘the relevant security mechanisms and remedial measures’ after discovering the attack. The attack was also reported to police forces and cybersecurity groups. MSI does not say what kind of attack it is or who was behind it. The attack is said to have no significant impact on MSI’s financial affairs and the systems are gradually being returned to service.

Customers are strongly advised by MSI to only install firmware and bios updates via MSI’s official website. It’s not clear whether MSI is doing this because code could have been stolen in the attack or as a general security measure. Ransomware group Money Message claims according to Bleeping Computer recently hacked MSI, allegedly stealing source code, private keys and bios firmware, among other things. Company databases would also have been viewed.

Money Message claims to have stolen 1.5TB of data and is demanding a $4 million ransom. The group claims to be able to develop bios updates with the stolen data and to install them with the private keys. It is not clear whether MSI was actually hacked by Money Message or by another party.