{"id":31695,"date":"2024-07-05T10:59:47","date_gmt":"2024-07-05T10:59:47","guid":{"rendered":"https:\/\/www.netgroup.it\/transit-mutual-insurance-corporation\/"},"modified":"2026-01-13T11:56:25","modified_gmt":"2026-01-13T11:56:25","slug":"transit-mutual-insurance-corporation","status":"publish","type":"post","link":"https:\/\/www.netgroup.it\/en\/transit-mutual-insurance-corporation\/","title":{"rendered":"Transit Mutual Insurance Corporation"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"31695\" class=\"elementor elementor-31695 elementor-23990\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c6a1cc0 e-flex e-con-boxed e-con e-parent\" data-id=\"c6a1cc0\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;triangle&quot;,&quot;shape_divider_bottom_negative&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"true\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 1000 100\" preserveAspectRatio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M500.2,94.7L0,0v100h1000V0L500.2,94.7z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-25243b3 e-flex e-con-boxed e-con e-parent\" data-id=\"25243b3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;triangle&quot;,&quot;shape_divider_bottom_negative&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"true\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 1000 100\" preserveAspectRatio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M500.2,94.7L0,0v100h1000V0L500.2,94.7z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bc0d8ad elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"bc0d8ad\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Transit Mutual Insurance Corporation<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-358ecc6 elementor-align-center elementor-widget elementor-widget-post-info\" data-id=\"358ecc6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-16de118 elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.netgroup.it\/en\/2024\/07\/05\/\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-calendar\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>05\/07\/2024<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3db9a25 e-flex e-con-boxed e-con e-parent\" data-id=\"3db9a25\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-dddec21 e-flex e-con-boxed e-con e-child\" data-id=\"dddec21\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1db2c7a elementor-widget elementor-widget-text-editor\" data-id=\"1db2c7a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Netgroup&#8217;s <a class=\"app-aware-link \" href=\"https:\/\/www.linkedin.com\/feed\/hashtag\/?keywords=cybersecurity&amp;highlightedUpdateUrns=urn%3Ali%3Aactivity%3A7214932101140250625\" data-test-app-aware-link=\"\">Cybersecurity<\/a> Observatory noted the publication of a post by the group called &#8220;BianLian,&#8221; claiming data theft against the Transit Mutual Insurance Corporation of Wisconsin.<\/p><p> <\/p><p>Transit Mutual Insurance Corporation is a nonprofit mutual insurance company located in Appleton, Wisconsin. The company provides insurance coverage for public transportation vehicles owned by Wisconsin municipalities. Founded with the goal of supporting the insurance needs of public transportation fleets, Transit Mutual Insurance Corporation plays a crucial role in protecting Wisconsin&#8217;s municipal resources.  <\/p><p> <\/p><p>According to BianLian in their post, the group was reportedly able to obtain about 400 GB of sensitive data belonging to Transit Mutual Insurance Corporation. The compromised data would include corporate information, accounting data, projects, network user folder data, file server data and personal data. <\/p><p> <\/p><p><strong>BianLian: a perocolous and sophisticated ransomware<\/strong><\/p><p> <\/p><p>BianLian is a ransomware first discovered in June 2022.  <br>It is written in the open source GoLang programming language and allows threat actors to deploy malware capable of thwarting reverse engineering and compromising multiple platforms.  <br>Here are some of its peculiarities:<\/p><ul><li>Vulnerability Chain:BianLian exploits the vulnerability chain of ProxyShell in Microsoft Exchange Server (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207) and SonicWall VPN devices to gain initial access to target networks.Living off the Land (LotL) Methodology:Uses this methodology for lateral displacement and network profiling, making use of tools and resources already present in the compromised system to avoid detection.<\/li><li>Special backdoor: BianLian uses a special backdoor to maintain constant access to the network and allow retrieval of arbitrary payloads from related remote servers, loading them into memory and executing them.<\/li><li>Dwell time: The ransomware remains active for six weeks from the time the malicious actor gains initial access until the actual encryption event.<\/li><li>Encrypted file extension: Adds the .bianlian extension to encrypted files.<\/li><\/ul><p>The \ud835\udde2\ud835\ude00\ud835\ude00\ud835\uddf2\ud835\uddff\ud835\ude03\ud835\uddee\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\uddf6\ud835\uddfc \ud835\ude00\ud835\ude02\ud835\uddf9\ud835\uddf9\ud835\uddee \ud835\uddd6\ud835\ude06\ud835\uddef\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddf2\ud835\uddf0\ud835\ude02\ud835\uddff\ud835\uddf6\ud835\ude01\ud835\ude06 \ud835\uddf1\ud835\uddf6 \ud835\udde1\ud835\uddf2\ud835\ude01\ud835\uddf4\ud835\uddff\ud835\uddfc\ud835\ude02\ud835\uddfd will continue to monitor the situation and provide updates as more information becomes available.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f79cbd3 elementor-widget elementor-widget-image\" data-id=\"f79cbd3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"644\" height=\"392\" src=\"https:\/\/www.netgroup.it\/wp-content\/uploads\/2024\/07\/onc-transit-mutual-insurance-corp.png\" class=\"attachment-large size-large wp-image-34056\" alt=\"\" srcset=\"https:\/\/www.netgroup.it\/wp-content\/uploads\/2024\/07\/onc-transit-mutual-insurance-corp.png 644w, https:\/\/www.netgroup.it\/wp-content\/uploads\/2024\/07\/onc-transit-mutual-insurance-corp-300x183.png 300w\" sizes=\"(max-width: 644px) 100vw, 644px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f1713e5 e-flex e-con-boxed e-con e-parent\" data-id=\"f1713e5\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;shape_divider_bottom&quot;:&quot;triangle&quot;,&quot;shape_divider_bottom_negative&quot;:&quot;yes&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-shape elementor-shape-bottom\" aria-hidden=\"true\" data-negative=\"true\">\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 1000 100\" preserveAspectRatio=\"none\">\n\t<path class=\"elementor-shape-fill\" d=\"M500.2,94.7L0,0v100h1000V0L500.2,94.7z\"\/>\n<\/svg>\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea811e9 elementor-widget elementor-widget-post-navigation\" data-id=\"ea811e9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-navigation.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-post-navigation\" role=\"navigation\" aria-label=\"Post Navigation\">\n\t\t\t<div class=\"elementor-post-navigation__prev elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/www.netgroup.it\/en\/open-source-software-and-cybersecurity-2\/\" rel=\"prev\"><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-prev\"><i aria-hidden=\"true\" class=\"fas fa-chevron-circle-left\"><\/i><span class=\"elementor-screen-only\">Prev<\/span><\/span><span class=\"elementor-post-navigation__link__prev\"><span class=\"post-navigation__prev--label\"><\/span><span class=\"post-navigation__prev--title\">Open Source Software and Cybersecurity<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"elementor-post-navigation__next elementor-post-navigation__link\">\n\t\t\t\t<a href=\"https:\/\/www.netgroup.it\/en\/agron-five-ten-adidas-terrex\/\" rel=\"next\"><span class=\"elementor-post-navigation__link__next\"><span class=\"post-navigation__next--label\"><\/span><span class=\"post-navigation__next--title\">Agron (Five Ten) Adidas Terrex<\/span><\/span><span class=\"post-navigation__arrow-wrapper post-navigation__arrow-next\"><i aria-hidden=\"true\" class=\"fas fa-chevron-circle-right\"><\/i><span class=\"elementor-screen-only\">Next<\/span><\/span><\/a>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Netgroup&#8217;s Cybersecurity Observatory noted the publication of a post by the group called &#8220;BianLian,&#8221; claiming data theft against the Transit Mutual Insurance Corporation of Wisconsin. Transit Mutual Insurance Corporation is a nonprofit mutual insurance company located in Appleton, Wisconsin. The company provides insurance coverage for public transportation vehicles owned by<span class=\"more-dots\">&#8230;<\/span><\/p>\n","protected":false},"author":1,"featured_media":33553,"comment_status":"closed","ping_status":"open","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-31695","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-senza-categoria"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/posts\/31695","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/comments?post=31695"}],"version-history":[{"count":0,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/posts\/31695\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/media\/33553"}],"wp:attachment":[{"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/media?parent=31695"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/categories?post=31695"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.netgroup.it\/en\/wp-json\/wp\/v2\/tags?post=31695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}