A group of hackers have targeted President Donald Trump's “dirty laundry.” with a $42 million ransom demand.
Sodinokibi, also referred to as Sodin or REvil by some publications, is said to have hacked into New York City-based law firm Grubman Shire Meiselas & Sacks (GSMLaw) and stole 756 gigabytes of data.
Besides Trump, the client of the firm is said to include high-profile figures like: Lady Gaga, Madonna, Nicki Minaj, Bruce Springsteen, Mary J. Blige, Drake, Ella Mai, Elton John, Christina Aguilera, Mariah Carey, Cam Newton, Robert de Niro, Bette Midler, Jessica Simpson, Priyanka Chopra, Idina Menzel, John Oliver and more.
The hack which appears to have occurred on or around May 7, is said to have stolen confidential documents, including contracts and personal emails from those high-profile figures.
The group also deleted or encrypted the firm’s backups, meaning that the only way to have the data back is to pay the criminals.
While many news agencies said that “they appear legitimate”, the group had yet to provide evidence that they actually have such compromising information.
Grubman Shire Meiselas & Sacks said that it has never had business dealings with Trump, and further noting that it's not sure which of its clients were actually impacted by the breach.
After the lawyers refused to pay for the ransom, and just at the moment people thought that REvil was bluffing, the hackers leaked 2.4 GB of the data online. The initial leak to prove that it is not joking, includes contracts between Lady Gaga with her producers, live performers and other collaborators.
It includes her touring ensemble information, promotional agreements and photos, expense sheets, confidentiality agreement forms, performer agreements, reimbursement forms, and more.
The hackers also provided snippets from a legal agreement in 2013 signed by Christina Aguilera and an artist featured in one of her music projects. Aguilera’s name was not present on the list of clients, indicating that she no longer retains the firm’s services.
There is also another fragment from another agreement between a crew member of the Madonna World Tour 2019-2020 and Live Nation Tours company.
Here is the full ransom note post:
Mr. Lawyer says that Donald has never been their client. And he says that we are bluffing. Oh well. The first part, with the most harmless information, we will post here. We are very pleased that the stars support (according to media reports) Mr. Lawyer
But how strong will their support be when the paparazzi start publishing in the media? When will they begin to refuse to participate in certain events, concerts? Withdraw signed contracts, cancel their performances?
Mr. lawyer, you will be to blame. And you will pay all losses from your pocket. Moreover, as correctly noted, your reputation has already suffered. But everyone believes that this is the worst we could do. Oh no. Far from the worst. Both we and you are aware of this. We will receive money in 2 ways:
1. You and I find a common language (you can even [sic] through intermediaries in other countries, since local idiots who themselves have something behind their backs prevent you from doing this). Then, everyone will see that you value the reputation and safety of customers. We give our word that after our agreements the data will not be published, used somewhere, or sold. This is our word. Our reputation is very well known and dear to us. We always keep our words. Then we get money, you return your reputation, data, strengthen your security and continue to live.
2. You continue to listen to smart guys who, of course, will not compensate you for losses. Our actions will be as follows:
1) We will auction customer data every week (by last name) on the information exchange.
This data will be bought either by the stars themselves, or various media and blackmail them then, or simply kind people with good intentions. We do not care. The main thing is we will get the money.
Accordingly, after this, people will begin to have problems. And, oh yes, they will know who to blame for this. And who put their safety and reputation in exchange for money.
2) Your data will remain unavailable. Let's be honest. Even these idiots cannot decipher elliptic cryptography. Although you can continue to believe them. You incur losses daily, and they are actively investigating this crime, although they themselves understand that they will fall into the wall. Moreover, they are looking for performers, not organizers. This is their business, we have fun watching with popcorn.
That's all I wanted to say. As you can see, both options benefit us. And we will get it. The only question is how strong losses [sic] you will incur. And those who trusted you.
Originally reported by gossip tabloid Page Six, the hackers upped and doubled their demands after the firm’s lawyers refused to pay the initial ransom of $21 million.
“The next person we’ll be publishing is Donald Trump. There’s an election race going on, and we found a ton of dirty laundry on time,” REvil said.
“And to you voters, we can let you know that after such a publication, you certainly don’t want to see him as president.”
"It seems that GRUBMANS doesn’t care about their clients or it was a mistake to hire a recovery company to help in the negotiations," added the hackers .
“Mr. Trump, if you want to stay president, poke a sharp stick at the guys, otherwise you may forget this ambition forever,” the cyber criminals added on their direct plea to the 45th President of the United States.
After the law firm again refused to pay, the hackers shared some download links to over a hundred emails that mention Trump in one way or another.
In a statement refusing to pay for the ransom, Grubmans wrote:
"Despite our substantial investment in state-of-the-art technology security, foreign cyberterrorists have hacked into our network and are demanding $42 million as ransom. We are working directly with federal law enforcement and continue to work around the clock with the world’s leading experts to address this situation."
"We are grateful to our clients for their overwhelming support and for recognising that nobody is safe from cyberterrorism today. We continue to represent our clients with the utmost professionalism worthy of their elite stature, exercising the quality, integrity, and excellence that have made us the number-one entertainment and media law firm in the world."
