Small Sydney tech company Qnect is in damage control after its customer data was reportedly stolen and held for ransom.
The attack comes just weeks after ransomware known as WannaCry disabled over 300,000 computers and essential services worldwide.
More World News Videos
- Video duration
- 01:12
New version of ransomware worm expected
New version of ransomware worm expected
Cyber security experts warning that new versions of the ransomware that crippled businesses and schools across the globe may wreak fresh havoc as employees return to work.
Up Next
Family of Zynab al Harbiya express loss
- Video duration
- 01:38
- Video duration
- 01:38
Family of Zynab al Harbiya express loss
Family of Zynab al Harbiya express loss
Her cousin Layla al Saabary says Zynab was excited for her trip to Iraq to visit her sick grandfather.
Up Next
Dubai Police roll out 'Robocop'
- Video duration
- 01:17
- Video duration
- 01:17
Dubai Police roll out 'Robocop'
Dubai Police roll out 'Robocop'
A robotic policeman which can help identify wanted criminals and collect evidence has joined Dubai's police force and will patrol busy areas in the city.
Up Next
Philippine gunman reportedly dead
- Video duration
- 00:36
- Video duration
- 00:36
Philippine gunman reportedly dead
Philippine gunman reportedly dead
A gunman who burst into a popular hotel casino in Manila early on Friday morning has been found dead at the complex, local police say.
Up Next
High level defence meeting in Sydney
- Video duration
- 01:37
- Video duration
- 01:37
High level defence meeting in Sydney
High level defence meeting in Sydney
Intelligence sharing will be a top priority when the US Secretary of State and Defence Secretary meet Foreign Minister Julie Bishop and Defence Minister Marise Payne in Sydney.
Up Next
Farage a 'person of interest' in Trump-Russia investigation
- Video duration
- 01:32
- Video duration
- 01:32
Farage a 'person of interest' in ...
Farage a 'person of interest' in Trump-Russia investigation
Brexit campaigner Nigel Farage says it's 'ridiculous' he's been labelled a 'person of interest' in a US investigation into possible collusion between Russia and Donald Trump's presidential campaign.
Up Next
Macron: make our planet great again
- Video duration
- 00:57
- Video duration
- 00:57
Macron: make our planet great again
Macron: make our planet great again
French President Emmanuel Macron has responded firmly to Donald Trump's announcement of US withdrawal from the Paris Agreement.
Up Next
Gunshots and explosions in Philippines attack
- Video duration
- 01:07
- Video duration
- 01:07
Gunshots and explosions in Philippines ...
Gunshots and explosions in Philippines attack
Armed men fire shots in an entertainment resort in Manila in a possible terrorist attack.
New version of ransomware worm expected
Cyber security experts warning that new versions of the ransomware that crippled businesses and schools across the globe may wreak fresh havoc as employees return to work.
The hackers, calling themselves RavenCrew, threatened to publish the data – including credit card details and email addresses – online unless Bitcoin were paid by the company, according to Business Insider.
Customers reportedly received SMS messages on Tuesday urging them to contact Qnect and encourage them to pay the ransom.
Related Content
"Please help us convince them to pay by emailing questions," said the SMS, before listing email addresses of two senior staff members.
Qnect offers an app-based online ticket-selling service used by hundreds of groups around the world such as university societies, according to its website.
Sydney University Law Society, which is believed to be affected by the hack, posted a warning on Tuesday evening to is members about the attack.
"This is a scam," it said, urging members to not reply.
The attack appears to have originated with customer Tommaso Armstrong, who drew attention to the security flaw with a tweet.
When you put in a dummy phone number when buying tickets and it leaks profile information based on that.... Great work, @QnectHQ pic.twitter.com/i7OOSkP0Ln
— Tommaso Armstrong (@tommarmstrong) May 29, 2017
The threat of releasing credit card details is low-impact exposure, according to Troy Hunt, a cyber security researcher.
"Personal details is a different class of data that has a different impact. Credit cards are recyclable, personal details aren't," he said.
"It's the sort of thing that sounds like it was done on the cheap. Someone was trying to do something in a user-friendly way without giving consideration to the way it could be abused.
"Hopefully the attack will prevent a much worse impact in the future."
The company is blaming a malware issue for the security breach that lead to the leak of customer details.
"Qnect experienced a malware attack via an employee's computer affecting a portion of the community similar to the global Wannacry attack last month," said Daniel Liang, co-founder and chief executive of Qnect.
"Thankfully the financial data of our community was not exposed. This attack does expose the difficulty of SMEs as they combat growing cyber attacks.
"We welcome the Government's move to help SMEs with good education and practices for cyber security as well as its new grant in this area," he said in response to the government pledging $15 million to fight cyber crime earlier this week.
"Please be assured that your financial information has not been compromised. Please don't respond to the text or open any links contained within it," Qnect said in a message to customers on Wednesday.
"Qnect is in touch with the relevant authorities, and we are working with them to ensure your data remains secure."
Affected by the attack? Email Richard Mcleish here.