The Devman ransomware group has claimed responsibility for a cyberattack against HeiTech Padu Berhad (HeiTech), a prominent information and communication technology (ICT) solutions provider based in Malaysia.
HeiTech specializes in systems integration, data center management, and network services, serving a wide range of clients in both the government and commercial sectors, including national security, healthcare, and transport. The attack appears to be a “double extortion” attempt, where the group both encrypts and exfiltrates sensitive data.
According to the actor’s post on their data leak blog, the group has successfully exfiltrated 60GB of data from the company’s network.
In exchange for not leaking the compromised data, the Devman group is demanding a ransom payment of $500,000. The group has initiated a countdown timer on its blog to pressure the company into negotiations.
