Open source tool maker Grafana Labs says hackers stole its code, refuses to pay ransom - BERITAJA

Grafana Labs, the shaper of its eponymous celebrated unfastened root web visualization software, confirmed it had been hacked but that it refused to salary the hackers who had threatened to merchandise the company’s codebase.

In a bid of posts connected societal media, the laboratory said its investigation recovered that the hackers had abused a stolen token credential that allowed entree to the company’s GitLab environment, which it uses for codification development. The token did not supply entree to customer records aliases financial data, but allowed the hackers to get the company’s repositories of root code. The institution has since invalidated the token and added further information measures to forestall a repetition incident.

“The attacker attempted to blackmail us, demanding costs to forestall the merchandise of our codebase,” the institution said.

Grafana’s codification is unfastened root and public, meaning anyone could download the package and edit its codification earlier moving it connected their ain machines. It’s unclear if the hackers stole immoderate proprietary codification aliases information. A spokesperson for the institution did not instantly return a petition for comment.

The incident contrasts pinch the caller hack astatine acquisition tech elephantine Instructure, which past week “reached an agreement” to salary the hackers who had compromised its web doubly successful caller weeks. The hackers had demanded an unspecified ransom, threatening to merchandise stolen information about unit and students who usage its package following a monolithic information breach and a consequent website defacement.

While successful Grafana’s case, nary customer information was taken, the institution cited the FBI’s long-standing proposal urging victims not to salary hackers, arsenic cooperating pinch hackers does not guarantee that they would return stolen information aliases refrain from publishing it later. Critics besides opportunity paying cybercriminals helps to money early cyberattacks.

Grafana said its investigation was ongoing and will stock its findings erstwhile its probe concludes.