Cran names INC Ransom as the NAC cyber attacker

A ransomware crew just admitted to swiping half a terabyte of sensitive data from Namibia’s airport company.

INC Ransom hits the NAC

• INC Ransom claimed they grabbed 500GB from the Namibia Airports Company.
• The stolen haul includes financial records and HR data.
• Cran confirmed the group is behind last week’s cybersecurity breach.
• None of the exfiltrated information has been released yet.

A repeat offender in Namibia

• The same crew hit the Otjiwarongo municipality last year.
• They use double extortion by stealing data and encrypting systems.
• Cran’s Mufaro Nesongano said a timer is ticking before a possible dump.
• The group is known for sophisticated attacks worldwide.

The official response so far

• NAM-CSIRT pointed everyone to their existing advisory on the group.
• Officials are urging organizations to lock down VPNs with MFA.
• They stressed that basic cyber hygiene and patch management are critical.
• Having an actual incident response plan is also on the checklist.