(translation of statement on their web site): The MNH has been undergoing a cyber round since�Friday, february 5, 2021�.�Computer systems hold been disconnected for security reasons. Our websites (mnh.fr, members’ area, corresponding and elected extranets) as well as our phone platform (3031) are temporarily unavailable.�The processing times for your requests are extended. Believe that we are well aware of the inconvenience caused.�Our teams are working to reinstate services as quickly as possible. We are committed to communicating in nail transparency on the evolution of the situation on our website mnh.fr G�rard Vuidepot, chairman and M�d�ric Monestier, Chief executive officer LeMagIT adds some venture as to how the attackers gained a foothold (translation): The mutual’s email is protected by Proofpoint, which suggests that the tone-beginning did not amount that way. But data from the specialized look engine Onyphe points to a Citrix / Netscaler Gateway system that was affected by the CVE-2019-19781 vulnerability, known as Shitrix, until January 15, 2020. Such a vulnerability may hold been exploited to position a bridgehead that will have been exploited much later. The example of Dassault Falcon jet tends to illustrate this, at least if we are to believe the assertions of the attackers.�Last December, they told us they had exploited a system that was still affected by the Shitrix vulnerability�at the�end of march 2020. But they would not hold fully taken advantage of it until around June, leash months after having established a chief of the bridge. LeMagIT also notes that polling firm BVA was also strike with ransomware. h/t, @Chum1ng0
