On Tuesday, Russian anti-malware firm Physician Net (Dr.Net) disclosed a safety breach after its methods have been focused in a cyberattack over the weekend.
Dr.Net disconnected all servers from its inside community after detecting “signs of unauthorised interference” to its IT infrastructure.
The corporate was additionally compelled to cease delivering virus database updates to clients on Monday whereas investigating the breach.
“The attack on our resources began on Saturday, September 14, 2024. We closely monitored it and kept the events under control,” the corporate stated.
“The attempt to harm our infrastructure was prevented in a timely manner, and no user whose system was protected by Dr.Web was affected,” it added in a separate assertion in English, revealed on its official web site.
“Following established security policies, we disconnected all our servers from the network and initiated comprehensive security diagnostics.”
In a new assertion revealed on Wednesday, Dr.Net said that virus database updates resumed on Tuesday and added that the safety breach did not affect any of its clients.
​”To analyse and eliminate the incident’s consequences, we implemented a series of measures, including the use of Dr.Web FixIt! for Linux,” the corporate stated.
“The gathered data allowed our security experts to successfully isolate the threat and ensure that our customers remained unaffected by it.”
A Dr.Net spokesperson did not reply to a request for remark when BleepingComputer reached out a number of occasions on Tuesday.
Dr.Net is the final in a collection of Russian cybersecurity corporations focused in cyberattacks lately. As an illustration, pro-Ukrainian hackers Cyber Anarchy Squad breached Russian data safety agency Avanpost in June and leaked what they claimed to be 390GB of information stolen earlier than encrypting over 400 digital machines.
Kaspersky additionally revealed in June 2023 that iPhones on its community have been contaminated with spy ware through iMessage zero-click exploits that focused iOS zero-day bugs as a part of a marketing campaign now often known as “Operation Triangulation.”
The corporate stated on the time that the assaults, which affected its Moscow workplace and workers in different nations, began in 2019 and have been nonetheless ongoing.