{"id":41844,"date":"2021-07-19T19:24:07","date_gmt":"2021-07-19T19:24:07","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/"},"modified":"2021-07-19T19:24:07","modified_gmt":"2021-07-19T19:24:07","slug":"cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/","title":{"rendered":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware"},"content":{"rendered":"<p><span data-label=\"in brief\">In Brief<\/span> Cloud-based IT provider Cloudstar has been hit by ransomware, taking down its systems. It said it is currently negotiating with the crooks that infected its computers.<\/p>\n<p>&#8220;On Friday, July 16, Cloudstar discovered it was the victim of a highly sophisticated ransomware attack,&#8221; the Florida-based biz warned its customers over the weekend.<\/p>\n<p>&#8220;Due to the nature of this attack, at this time our systems are currently inaccessible, and although we are working around the clock, we do not have a definitive restoration timeline. Our Office 365 mail services, email encryption offering and some support services are still fully operational.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>&#8220;Cloudstar has retained third-party forensics experts Tetra Defense to assist us in our recovery efforts and also informed law enforcement. Negotiations with the threat actor are ongoing. We are working diligently to address this matter as quickly as possible and will keep our stakeholders informed.&#8221;<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xmd=\",fluid,mpu,leaderboard,\" data-lg=\",fluid,mpu,leaderboard,\" data-xlg=\",fluid,billboard,superleaderboard,mpu,leaderboard,\" data-xxlg=\",fluid,billboard,superleaderboard,brandwidth,brandimpact,leaderboard,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<div class=\"adun_eagle_desktop_story_wrapper\">\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xxlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<\/p><\/div>\n<p>Cloudstar is <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.thetitlereport.com\/Articles\/Highly-sophisticated-ransomware-attack-sidelines-C-82772.aspx\">said to provide<\/a> technology for hundreds of title companies and lenders. It offers remote virtual desktops, cloud-hosted software and storage, and IT security to businesses in the Americas working in real estate, finance, insurance, and petrochemicals.<\/p>\n<p>&#8220;This is an incredibly difficult time for Cloudstar but more importantly, for our customers, whose trust we value so highly,&#8221; the outfit added on its <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.mycloudstar.com\/\">website<\/a>.<\/p>\n<div class=\"boxout\" readability=\"19.773195876289\">\n<p>Four Chinese people living in the Middle Kingdom have been <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.justice.gov\/opa\/pr\/four-chinese-nationals-working-ministry-state-security-charged-global-computer-intrusion\">accused<\/a> by Uncle Sam of compromising &#8220;the computer systems of dozens of victim companies, universities and government entities in the United States and abroad between 2011 and 2018.&#8221; Their alleged activity has been linked to a Beijing-run crew dubbed <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/07\/19\/hafnium_china_state_security\/\" rel=\"noopener\">APT40<\/a>.<\/p>\n<p>Miscreants are <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/saudi-aramco-data-breach-sees-1-tb-stolen-data-for-sale\/\">peddling<\/a> on the dark web 1TB of stolen data said to belong to Saudi Aramco.<\/p>\n<p>Spyware maker NSO tried to build a business in the United States, and failed, though its lobbyists, consultants, and lawyers made good money from the attempt, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.washingtonpost.com\/technology\/2021\/07\/19\/nso-business-us\/\">it is reported<\/a>.<\/p>\n<\/div>\n<h3 class=\"crosshead\"> <span>Cloudflare code-execution bug spotted, squashed<\/span><br \/>\n<\/h3>\n<p>A critical flaw in a Cloudflare service said to be used by 12.7 per cent of all websites could have been hijacked by a malicious user-controlled package to potentially compromise a good number of webpages.<\/p>\n<p>The service in question is <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/cdnjs.com\/\">cdnjs<\/a>, which hosts people&#8217;s JavaScript and CSS libraries and serves them from a content delivery network. Bug-hunter RyotaK, while investigating supply chain attacks, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/blog.ryotak.me\/post\/cdnjs-remote-code-execution-en\/\">found<\/a> a path-traversal bug that could be exploited by a carefully crafted JS\/CSS library <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/blog.sonatype.com\/this-npm-package-could-have-brought-down-cloudflares-entire-cdn-and-millions-of-websites\">submitted<\/a> to cdnjs via its GitHub repository for inclusion in the CDN.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",fluid,mpu,\" data-sm=\",fluid,mpu,\" data-md=\",fluid,mpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>This library would be able to overwrite files and execute commands within the context of cdnjs&#8217;s backend when the submission is processed, and could obtain Cloudflare&#8217;s secret GitHub API keys. An attacker potentially could have used that position to alter the JavaScript and CSS delivered to those websites using cdnjs.<\/p>\n<p>Just as interesting, when RyotaK tried out a proof-of-concept exploit for this vulnerability, GitHub triggered an alert to Cloudflare that its credentials had been compromised, and the API keys were rapidly revoked and regenerated by staff. We&#8217;re told RyotaK, who was participating in Cloudflare&#8217;s bug-bounty program, submitted a vulnerability report soon after in early April, and the issue was fully fixed by early June.<\/p>\n<p>&#8220;While this vulnerability could be exploited without any special skills, it could impact many websites,&#8221; RyotaK said this month. &#8220;Given that there are many vulnerabilities in the supply chain, which are easy to exploit but have a large impact, I feel that it\u2019s very scary.&#8221;<\/p>\n<h3 class=\"crosshead\"> <span>America finally has a head of the CISA<\/span><br \/>\n<\/h3>\n<p>Jen Easterly has been confirmed by Congress as the new director of the US Cybersecurity and Infrastructure Security Agency (CISA).<\/p>\n<p>A former president <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2020\/11\/18\/trump_fires_krebs\/\" rel=\"noopener\">fired<\/a> the previous CISA chief Chris Krebs by tweet after the director said the 2020 election of Joe Biden was \u201cthe most secure in American history.&#8221; Easterly was a name that <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/01\/25\/biden_cybersecurity_team\/\" rel=\"noopener\">came up early<\/a> for a top US government cyber-security post though political wrangling delayed her formal instalation.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" id=\"story_eagle_xsm_sm_md_xmd_lg_xlg\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",mpu,dmpu,\" data-sm=\",mpu,dmpu,\" data-md=\",mpu,dmpu,\" data-xmd=\",mpu,dmpu,\" data-lg=\",mpu,dmpu,\" data-xlg=\",mpu,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Easterly is well respected in the industry: she is a Rhodes Scholar who went to Oxford and spent 20 years in the US Army, setting up its first first cyber battalion, and was a key player in the formation of today&#8217;s US Cyber Command. She has served at the NSA as head of its Tailored Access Operations penetration team and as a national security advisor to Presidents Bush and Obama.<\/p>\n<p>Easterly&#8217;s confirmation was held up in June when Senator Rick Scott (R-FL) <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/thehill.com\/policy\/cybersecurity\/559936-rick-scott-blocks-senate-vote-on-top-cyber-nominee-until-harris-visits\">put a hold<\/a> on the process until Biden went down to the US-Mexico border. Later in the month, when the hold was lifted, the Senate couldn&#8217;t get around to it because a <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.cyberscoop.com\/cisa-senate-jen-easterly-confirmation\/\">two-week recess<\/a> was being held.<\/p>\n<h3 class=\"crosshead\"> <span>Boffins turn spotlight on Telegram security<\/span><br \/>\n<\/h3>\n<p>Cryptographers at ETH Zurich and Royal Holloway college at the University of London have investigated Telegram&#8217;s home-grown encrypted chat protocol, and claim an attacker could exploit it to, among other things, change the order of messages sent and potentially uncover plaintext of some communications in exceptional circumstances.<\/p>\n<p>&#8220;In this instance our work was motivated by other research that examines the use of technology by participants in large-\u200bscale protests such as those seen in 2019\/2020 in Hong Kong,&#8221; <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/ethz.ch\/en\/news-and-events\/eth-news\/news\/2021\/07\/four-cryptographic-vulnerabilities-in-telegram.html\">said<\/a> Royal Holloway professor Martin Albrecht. &#8220;We found that protesters critically relied on Telegram to coordinate their activities, but that Telegram had not received a security check from cryptographers.&#8221;<\/p>\n<p>&#8220;None of the changes were critical,&#8221; Telegram said in a statement, referring to software updates issued to address the academics&#8217; findings.<\/p>\n<h3 class=\"crosshead\"> <span>Iranians fingered for academic phishing attack<\/span><br \/>\n<\/h3>\n<p>A group identified as working with the Islamic Revolutionary Guard Corps (IRGC) has been running a phishing campaign aimed at harvesting information from academics, think tank policy makers, and journalists covering the Middle East.<\/p>\n<p>The campaign, <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/operation-spoofedscholars-conversation-ta453\">dubbed SpoofedScholars<\/a> by Proofpoint, sent out a spearphishing email impersonating a senior lecturer at the University of London\u2019s School of Oriental and African Studies (SOAS). The recipients were asked to speak at a webinar on \u201cthe US security challenges in the Middle East,\u201d and the URL led to a compromised University of London\u2019s SOAS radio website.<\/p>\n<p>That site asked people to sign in using their Google, Yahoo, Microsoft, iCloud, AOL, mail.ru, or Facebook account details, which would have been collected by the phishers. A few months later the same tactic was tried again, using another SOAS academic&#8217;s name and inviting people to a \u201cDIPS Conference.\u201d<\/p>\n<p>&#8220;Proofpoint recommends investigating network traffic to soasradio[.]org, specifically URIs starting with hxxps:\/\/soasradio[.]org\/connect\/?memberemailid=,&#8221; the report advises. &#8220;Additionally, emails from hanse.kendel4[@]gmail.com, hannse.kendel4[@]gmail.com, and t.sinmazdemir32[@]gmail.com should be considered suspect and investigated.&#8221;<\/p>\n<h3 class=\"crosshead\"> <span>Ring E2EE now generally available<\/span><br \/>\n<\/h3>\n<p>After a beta-testing phase, Amazon is officially rolling out <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/blog.ring.com\/2021\/01\/13\/ring-launches-video-end-to-end-encryption\/\">its end-to-end encryption<\/a> for its most-recent internet-connected cameras and floodlights. You can get the full list of devices that support the system <a target=\"_blank\" rel=\"nofollow noopener\" href=\"https:\/\/blog.ring.com\/products-innovation\/ring-announces-international-availability-of-video-end-to-end-encryption\/https:\/\/support.ring.com\/hc\/en-us\/articles\/360054941551-How-to-Set-Up-Video-End-to-End-Encryption-E2EE-\">here<\/a>. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/07\/19\/in_brief_security\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Plus: Telegram security probed, CISA boss confirmed, and more In Brief\u00a0 Cloud-based IT provider Cloudstar has been hit by ransomware, taking down its systems. It said it is currently negotiating with the crooks that infected its computers.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-41844","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-07-19T19:24:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware\",\"datePublished\":\"2021-07-19T19:24:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/\"},\"wordCount\":1139,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/\",\"name\":\"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-07-19T19:24:07+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/","og_locale":"en_US","og_type":"article","og_title":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-07-19T19:24:07+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware","datePublished":"2021-07-19T19:24:07+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/"},"wordCount":1139,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/","url":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/","name":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-07-19T19:24:07+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YPX-hZeCG4Ozii41YbcdwQAAAFU&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/cloudstar-it-provider-for-real-estate-finance-insurance-worlds-downed-by-ransomware\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Cloudstar \u2013 IT provider for real estate, finance, insurance worlds \u2013 downed by ransomware"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=41844"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/41844\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=41844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=41844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=41844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}