MSI hacked: Watch out for malicious fake software

Modern corporations are under near-constant attack by malicious hackers and other digital no-goodniks, and gaming hardware makers are no exception. Such is the case for MSI, which confirmed to its customers that it’s been the victim of a cyberattack. Though MSI is not enumerating who is responsible or what damage was done, a ransomware group has claimed responsibility and threatened to release source code and proprietary software if the company doesn’t pay up.

According to Bleeping Computer, the ransomware group has posted evidence that it’s been able to steal MSI source code, BIOS firmware, private keys, and 1.5 terabytes of other information crucial to MSI hardware. The criminals are asking for $4 million in ransom in order to stop from releasing the full cache of data to the web. While avoiding specifics, MSI warns customers not to download BIOS/UEFI files or firmware from any source except directly on MSI’s website, indicating that compromised software in “the wild” is a current concern.

TechPowerUp quotes MSI representatives who say that the company is now “restoring its systems back to normal operations,” and that the attack has had a minimal effect on its day-to-day business. If the company is telling the truth, customers have little to worry about so long as they practice the usual due diligence when downloading software, drivers, and updates. The recent hack is apparently unrelated to a string of fraudulent emails that began circulating in February, claiming to offer lucrative MSI sponsorships to content creators.