Slashdot Mirror


NotPetya Ransomware Victims Preparing Lawsuit Against Ukrainian Software Firm (bleepingcomputer.com)

An anonymous reader writes from a report via Bleeping Computer: The Juscutum Attorneys Association, a Ukrainian law firm, is rallying NotPetya victims to join a collective lawsuit against Intellect-Service LLC, the company behind the M.E.Doc accounting software -- the point of origin of the NotPetya ransomware outbreak. The NotPetya ransomware spread via a trojanized M.E.Doc update, according to Microsoft, Bitdefender, Kaspersky, Cisco, ESET, and Ukrainian Cyber Police. A subsequent investigation revealed that Intellect-Service had grossly mismanaged the hacked servers, which were left without updates since 2013 and were backdoored on three different occasions. On Tuesday, Ukrainian Cyber Police confirmed that M.E.Doc servers were backdoored on three different occasions in an official document. The company is now using this document as the primary driving force behind its legal action. Juscutum says that victims must pay all court fees, must provide evidence or help with the collection of evidence, and agree to a 30% cut in the case of any awarded damages. The lawsuit is in its incipient stages. Juscutum representatives are currently spreading their message and encouraging victims to join the lawsuit via social media posts and articles in local Ukrainian press.

25 comments

  1. Ukrainian by turkeydance · · Score: 2

    says it all

    1. Re: Ukrainian by Jesus+H+Rolle · · Score: 0, Troll

      How much is Putin paying you? This is obviously a false flag operation by the Ruskies.

    2. Re:Ukrainian by Anonymous Coward · · Score: 0

      "Cyber police" says even more!
      Can't believe they have police for cyber sex.

    3. Re: Ukrainian by Anonymous Coward · · Score: 2, Informative

      How much is Putin paying you? This is obviously a false flag operation by the Ruskies.

      How much is Trump paying you? Obvious CIA operation.

    4. Re: Ukrainian by Anonymous Coward · · Score: 0

      The Russians planted the malware but now they're just chilling and enjoying the fun.

    5. Re:Ukrainian by houghi · · Score: 1

      Yeah. The Russians gave it to them to harm the Ukraine. This was never really about money. It was about politics.

      --
      Don't fight for your country, if your country does not fight for you.
    6. Re:Ukrainian by Anonymous Coward · · Score: 0

      Yeh, Russia attacks Ukraine company, then Russia hires a Ukrainian law-firm to sue the company it attacked to double down on the attack.

      Lovely.

      Sort of like how Hannity invented fake quotes from an FBI source they hired to pretend Russia wasn't involved in the hack of the DNC. (According to the lawsuit from the disgruntled ex FBI investigator himself). There are always people who will sell their country for money.

    7. Re: Ukrainian by Anonymous Coward · · Score: 0

      How much is Putin paying you? This is obviously a false flag operation by the Ruskies.

      How much is Trump paying you? Obvious CIA operation.

      How much is Hillary paying you? Obvious DNC tactic.

  2. So... by Puls4r · · Score: 3, Insightful

    The only ones who win are the (Ukranian) lawyers. Nice.

    1. Re:So... by rtb61 · · Score: 2

      Better those lawyers win and put the idiots out of business, rather than that software putting a whole bunch of their customers out of business when those customer computers carrying financial data get hacked. Back doored three bloody times, insider job at management level. The company will get sued into extinction and deservedly so. The laughable Democrat Russia defence, doesn't really cut when it hits an actual court room (which is why the corporate Democrat Russia defence will never ever touch a court room).

      --
      Chaos - everything, everywhere, everywhen
    2. Re: So... by Anonymous Coward · · Score: 1

      This! The company is pretty much monopoly for certified accounting software in Ukraine. So while they had nice pay checks for their services, they neglected basic security practices for years. Now they must share the financial burden as their customers suffered greately due to their negligence. It's fair game...

  3. All of the victims used Microsoft products... by Anonymous Coward · · Score: 0

    so I can't be too sympathetic to them. The should have known better.

    1. Re: All of the victims used Microsoft products... by Anonymous Coward · · Score: 0

      This. They knew running Microsoft garbage was dangerous.

    2. Re:All of the victims used Microsoft products... by Anonymous Coward · · Score: 2

      so I can't be too sympathetic to them. The should have known better.

      Some people have jobs and don't get to pick their favourite OS but what the applications run on. It's so easy when you never leave the basement.

    3. Re:All of the victims used Microsoft products... by Anonymous Coward · · Score: 0

      You are correct. They should have known they would have security problems.

  4. Ironic by Anonymous Coward · · Score: 0

    So a bunch of companies that fell victim to ransomware due to their poor IT practices are suing another company because it had similarly poor IT practices?

  5. So I live in ukraine by Anonymous Coward · · Score: 0

    Borderline insane lack of proper cybersecurity measures here is commonplace. Hitting just one company won't help if 90% of population is sitting with cracked windows 7 machines

    1. Re:So I live in ukraine by Anonymous Coward · · Score: 0

      Take it on the bright side, that's still better than legit windows 10 machines!

  6. Even money on Russia by NotQuiteReal · · Score: 1

    Russia is hectoring the Ukraine every chance it gets.

    --
    This issue is a bit more complicated than you think.
    1. Re:Even money on Russia by qaz123 · · Score: 2

      Ukraine uses every chance to blame everything on Russia.

  7. Ambulance chasing intensifies by Anonymous Coward · · Score: 0

    Ambulance chasing intensifies

  8. Actually the winners may not be the lawyers by Zontar_Thing_From_Ve · · Score: 1

    The only ones who win are the (Ukranian) lawyers. Nice.

    I haven't been to Ukraine in a decade so my perceptions are not up to date, but in the previous decade the Ukrainian judicial system had a lot of corruption. You want a specific verdict? Just get to the judge in private, "accidentally" leave a bag of sufficient cash, and then the trial mysteriously always seems to go your way. I've even heard from sources I trusted, although I could not personally verify the stories, that it was even possible to bribe your way out of a murder charge. I can tell you that twice I was in a car as a passenger when the car was pulled over for a "violation" the policeman made up on the spot and after a payment equivalent to about $10 US was made, the car that just moments ago simply had to be pulled over was suddenly OK to leave. Good luck to those suing, but my guess is that the company will pay the judge as quickly as possible and this isn't going to end well for the plaintiffs.