Ransomware – Support IT A/S (SIT)

The attack vector was email thread hijacking from a compromised customer's Microsoft Exchange server — threat actors tricked SIT staff into opening malicious attachments. Over 70 customers were affected. Major real estate chains Realmæglerne and Nybolig experienced significant outages.

Recovery was staggered over 10 days. Dedicated server customers recovered faster than shared server clients. Backup systems enabled faster-than-typical recovery.

• Computerworld — Realmæglerne gør klar til forsikringssag
• Version2 — Hackerangreb påvirker flere danske ejendomsmæglerkæder
• Computerworld — Flere danske ejendomsmæglere påvirket
• Computerworld — Ejendomsmæglere fortsat lagt ned tre dage efter
• Computerworld — Hackere kræver løsepenge af dansk hosting firma
• Computerworld — Realmæglerne vil have myndighederne på banen