Studio Rossetti e Partners listed on malas leak site

• Ransomware group: malas
• Country: Italy
• Sector: Professional Services
• Announcement date: April 9, 2023

Studio Rossetti e Partners targeted by malas

The threat group known as malas has listed the Italian professional services firm Studio Rossetti e Partners on its leak site. The announcement, made on April 9, 2023, indicates a potential data breach involving the organization. While the listing is a claim made by the threat actor, it highlights an ongoing trend of extortion-based attacks targeting professional service providers.

Details of the alleged attack

According to the claims made by the malas group, the threat actor managed to gain unauthorized access to the institution's network. The group asserts that they utilized a vulnerability within Zimbra to facilitate this intrusion. Following the initial access, the group has threatened to publish or share the institution's data if a ransom is not paid. This tactic is a hallmark of double extortion, a method where attackers not only encrypt data to disrupt operations but also threaten to leak sensitive information to increase the pressure on the victim to pay.

In double extortion schemes, the pressure is applied through the threat of public exposure. By threatening to release data on a public leak site, attackers aim to cause maximum reputational and legal damage. This pressure is often used to ensure that even if an organization can restore its systems from backups, they still feel compelled to pay to prevent the disclosure of confidential information.

Data involved in the claim

Regarding the specific information that may have been compromised, the listing provides no detailed information regarding the nature of the leaked or threatened data.

About Studio Rossetti e Partners

Studio Rossetti e Partners is a professional services firm based in Milan, Italy. The organization primarily provides legal and consulting services to its clients. Given its role in providing legal and consulting services, the firm handles sensitive information that is often subject to strict privacy standards and professional confidentiality requirements.

Impact and industry implications

The potential leakage of data from a professional services firm can lead to significant risks for both the organization and its stakeholders. For clients and business partners, a breach of this nature may result in risks such as identity theft or the threat of targeted phishing attacks. Attackers often use stolen information to craft highly convincing fraudulent communications to further exploit victims.

For institutions operating within the professional services sector, data privacy breaches can lead to severe consequences, including legal sanctions under regulations such as the General Data Protection Regulation (GDPR). Furthermore, the use of double extortion methods can negatively impact an institution's operational continuity and its overall reputation in the marketplace. The alleged exploitation of a specific vulnerability, such as the one mentioned in the Zimbra software, suggests that there may be existing weaknesses within the institution's security infrastructure that were identified and exploited by the threat actor.

To defend against such threats, organizations typically focus on several key security pillars. Maintaining robust patch management is essential to address vulnerabilities in software like email servers before they can be exploited. Implementing strong access controls and multi-factor authentication can help prevent unauthorized network entry. Additionally, continuous monitoring of network traffic and regular security audits can help identify potential weaknesses in the security infrastructure. For professional services, maintaining strict data governance and ensuring compliance with privacy regulations like GDPR is a critical component of a comprehensive defense strategy.