The Lapsus$ ransomware gang has hacked and is currently extorting Impresa, the largest media conglomerate in Portugal and the owner of SIC and Expresso, the country’s largest TV channel and weekly newspaper, respectively.
The attack has taken place over the New Year holiday and has hit the company’s online IT server infrastructure. Websites for the Impressa group, Expresso, and all the SIC TV channels are currently offline.
The Lapsus$ group took credit for the attack by defacing all of Impressa’s sites with a ransom note. Besides a ransom request, the message claims that the group has gained access to Impresa’s Amazon Web Services account.