Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack

Technology elephantine Kiteworks is urging customers to unopen down their systems aft the institution received accusation that hackers whitethorn effort to people them.

Kiteworks (formerly Accellion), which makes tools for transferring ample files and delicate datasets implicit the internet, confirmed to TechCrunch that it had notified its customers astir a imaginable threat. The quality was first reported exclusively by German work Heise, which cited an email that Kiteworks had sent to its customers astir an “imminent” onslaught that could hap arsenic soon arsenic this weekend.

When reached by email connected Friday, Kiteworks main accusation information serviceman Frank Balonis told TechCrunch that the institution “received credible menace quality from instrumentality enforcement indicating that a menace histrion whitethorn effort to people immoderate Kiteworks systems for customers.”

“Out of an abundance of caution, we notified customers straight and recommended a precautionary shutdown model portion we and our instrumentality enforcement partners enactment done the matter,” said Balonis. “We are not alert of immoderate compromise of Kiteworks systems, and this advisory is preventative alternatively than a effect to a confirmed breach.”

Kiteworks did not say, erstwhile asked, which instrumentality enforcement bureau alerted the institution oregon which hacking radical whitethorn beryllium down the threat. The FBI and the U.S. cybersecurity bureau CISA did not respond to TechCrunch’s requests for remark astir the Kiteworks alert to customers.

Balonis said that the institution has fixed each known vulnerabilities successful its latest bundle release, 9.5.1, which it recommends each customers use.

According to a transcript of the email sent to customers connected Friday and shared with TechCrunch, the institution said it was acrophobic astir the exploitation of vulnerabilities that are presently chartless to Kiteworks. These bugs are known arsenic zero-day flaws due to the fact that they springiness the vendor — successful this lawsuit Kiteworks — nary clip to hole the flaws earlier they are exploited.

In the email, Kiteworks urged customers to unopen down their systems earlier the weekend, if not sooner, to “protect against immoderate imaginable zero-day attacks,” arsenic the institution cannot corroborate whether determination are different imaginable routes for improper access.

It’s unclear precisely however galore customers whitethorn beryllium affected, but Kiteworks notes connected its website that it has thousands of customers crossed healthcare, technology, education, automotive, and government, among others. Security researcher Kevin Beaumont pointed to a listing of astatine slightest a 1000 internet-facing Kiteworks systems online today. 

Kiteworks is nary alien to cyberattacks. Prior to its rebrand from Accellion successful precocious 2021, a vulnerability successful its file-transfer exertion allowed an extortion pack to wide hack and bargain information from hundreds of organizations that relied connected the merchandise to nonstop lawsuit oregon interior firm information implicit the internet.

The wide hack was portion of a broader hacking run targeting record transportation products, with the extremity of stealing copies of the information that had been antecedently sent implicit the net but not deleted from the affected servers. The hackers past held the information for ransom, threatening to publically merchandise customers’ accusation if the unfortunate organizations did not wage a ransom.

Do you cognize much astir the menace facing Kiteworks customers? Are you an affected Kiteworks customer? We’d emotion to perceive from you. You tin interaction this newsman securely connected Signal astatine zackwhittaker.1337, oregon scope him by email astatine zack.whittaker@techcrunch.com.