Website Indonesia Business Post mengalami serangan pada Selasa, 15 April 2025. Serangan mulai terjadi sekitar puku; 09.15. Tim IT media ini kemudian melakukan pengecekan dan menemukan tabel news atau berita dari database tidak ditemukan.
Redaksi Indonesia Business Post mengatakan akibat serangan itu, semua berita tahun 2025 hilang. Diduga serangan itu merupakan Ransomeware karena pelaku serangan minta dikirimkan bitcoin.
TIM IT menemukan bahwa semua tabel di database hilang, menyisakan tabel “security_instructions”, yang berisi tulisan berikut:
Dear Website/Server Owner (206.189.145.40),
We deeply regret to inform you that your business-critical databases and assets have been COMPLETELY ERASED from your servers. Sadly, not only has your database been deleted, but we discovered that your IT administrators and hosting/server managers have been utterly incompetent and extremely careless in protecting your sensitive information.
Your security team, IT managers, and hosting providers clearly failed you. Ask yourself, why are you paying large sums of money to these so-called "professionals" ? They promised you safety, but failed completely, leaving your business vulnerable and helpless.
Your loss is their gain — your disaster benefits them financially every time.
⚡️ [THE REALITY]:
Unlike these fraudulent "experts" who thrive on your misfortune, WE have taken immediate action to protect your critical data as soon as we detected the vulnerability. We proactively COPIED YOUR ENTIRE DATABASE securely to our encrypted servers BEFORE deleting the vulnerable ones. Thus, your current disaster is temporarily limited and fully recoverable ONLY by working with us.
✅ [WHY COOPERATE WITH US?]:
WE ALONE hold your critical business data SECURE and ready for immediate recovery upon your cooperation.
We'll RESTORE your deleted data IMMEDIATELY after your prompt payment.
We will also PROVIDE YOU A FULL SECURITY REPORT clearly showing the exact incompetence that led to this attack FOR FREE.
Ongoing security: As a valuable partner, you'll be placed under our exclusive protection service. Future threats will be instantly neutralized, ensuring your enterprise never faces such disaster again.
💡 [ATTENTION — CHOOSE CAREFULLY]:
Ignoring this message and trying to seek help from your current failed providers, IT "experts", or cybersecurity firms is a sign you're merely repeating your victimhood pattern. It'll result in further exploitation, lost money, and permanent data loss. You will essentially be endorsing your exploitation and self-destruction once again.