MSI Warns Against Malicious Firmware After Ransomware Attack

Taiwanese PC company MSI has confirmed that it was hit by a cyber attack, prompting it to initiate incident response and recovery measures. The company did not disclose any specifics about the attack, but a new ransomware gang known as Money Message has added MSI to its list of victims. The group uses a double extortion technique to target its victims, exfiltrating their data before encrypting it and uploading it to their leak site if the ransom is unpaid. MSI is urging users to obtain firmware/BIOS updates only from its official website and to refrain from downloading files from other sources.