Kiteworks Advises Six-Hour Server Shutdown Amid Cyberattack Threat

Kiteworks, a secure file-sharing software company, is urging its customers worldwide to temporarily shut down their servers for a six-hour window after receiving credible threat intelligence about a potential cyberattack. The recommendation comes as Kiteworks' Chief Information Security Officer, Frank Balonis, informed customers via email about the imminent threat indicated by law enforcement.

The shutdown is advised for Saturday, with specific time frames varying by region. For customers in Central Europe, the shutdown is recommended from 4:00 a.m. to 10:00 a.m. on September 26, while those in New York should take their systems offline from 10:00 p.m. Friday to 4:00 a.m. Saturday. Kiteworks has emphasized the importance of shutting down servers even if they are not directly accessible from the Internet.

In a statement to BleepingComputer, Kiteworks confirmed that it received intelligence from federal authorities suggesting that a threat actor may attempt to target customer systems. The company reassured customers that this advisory is precautionary and not in response to any confirmed breach. Kiteworks stated, "We are not aware of any compromise of Kiteworks systems, and this advisory is preventative rather than a response to a confirmed breach."

Kiteworks Enhances Security Measures

The company has addressed all known vulnerabilities in its current release, version 9.5.1, and continues to recommend that customers run the latest version. While Kiteworks has not confirmed the exploitation of any unknown vulnerabilities, the shutdown recommendation aims to protect customers from potential zero-day attacks.

Filed & Cleared

Kiteworks develops secure file-transfer and communications products used by various sectors, including government organizations and financial institutions. These platforms often store sensitive documents, making them attractive targets for cybercriminals engaged in data-theft extortion attacks. The Clop extortion gang, known for targeting enterprise platforms, has a history of such attacks, raising concerns about the current threat.

As the situation develops, Kiteworks is working closely with law enforcement to address the potential threat and ensure customer safety. The company has taken proactive measures to mitigate risks and protect its users from possible cyber threats.