'Everest Group' Extorts Global Orgs via SAP's HR Tool
ID: 25f46401-86e9-55ca-a616-957344e00059
STIX ID: report--25f46401-86e9-55ca-a616-957344e00059
Feed Name: Dark Reading
Threat Score
Everest Group, an extortionist/information-broker, has conducted a string of attacks across multiple regions targeting HR data in SAP SuccessFactors, exfiltrating sensitive employee PII (names, addresses, salaries, passports/visas) from organizations including Coca-Cola, Mediclinic, and government entities; researchers link several incidents to likely initial access via a third-party SAP integrator (INK IT Solutions), and the actor is actively extorting victims and selling access or stolen data.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.