After trying to extort Apple last week, the REvil ransomware gang has removed Apple’s schematics from their data leak site and instead warns they will start to publish drawings for the “new iPad, new Apple logos” if they do not receive a ransom.
The gang privately warned Quanta, a Taiwan-based original design manufacturer (ODM) that manufactures hardware for Apple, that they would leak Apple drawings.
In an attack on Quanta earlier this month, the ransomware gang stole data belonging to Apple, including drawings and schematics for the Apple Watch, Apple Macbook Air, and the Apple Macbook Pro. Having not received a $50 million ransom from Quanta, REvil began to extort Apple, demanding twice as big ransom and posting schematics for Apple Macbooks on their data leak site.
REvil warned Apple must buy back the data by May 1st or the gang would leak more data.
In a surprise move today the ransomware gang removed the Quanta leak page and Apple schematics and drawings from their data leak site.
According to BleepingComputer, in a private chat, REvil told Quanta they would hide the data leak page and stop talking to reporters to allow negotiations to continue. Probably they do now.
On a new ransom page, REvil promised Quanta a discount – to reduce the ransom from $50 to $20 million for starting a negotiation, “Having started a dialogue with us, you can count on a good discount.”
The gang also warned Quanta they would start to publish drawings for the “new iPad, new Apple logos” if Quanta doesn’t pay.
The new REvil and Quanta chat (BeepingComputer)
It is unknown whether the company communicates with REvil or negotiations have never started.
This is a developing story, we will keep our readers updated.