Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note, our reportingThe Everest group claims to have stolen 236.29 GB from VIVOTEK, comprising 94,837 files, according to their leak post. They describe the data as a unified internal VIVOTEK data repository including firmware, embedded-system images, source and build artifacts, SDKs, VADP, VCA and ANPR packages, NVR software, factory and service tools, documentation, diagnostic material and product-support data. The leak post is published, and the ransom note states the files will be published after a countdown, with VIVOTEK having time to contact the group.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- ARM32 HiSilicon ARMv7 hard-float SigmaStar AArch64
What was taken
The report describes the unified internal VIVOTEK data repository, including firmware, embedded-system images, source and build artifacts, SDKs, VADP, VCA and ANPR packages, NVR software, factory and service tools, documentation, diagnostic material and product-support data. The repository contains 94,837 files in 9,865 folders totaling 236.29 GB. The data covers several generations of cameras and NVRs, internal development branches, exact SVN and Git manifests, the MD9560 source/build snapshot, ARM and AArch64 development libraries, client SDKs, factory software, recovery environments, VADP applications, VCA, ANPR and engineering documentation.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- latest post
- Sep 1
- view_count_line
- 12,447 12,447 views Sep 1
- The files will be published after the timer counts down. The company still has t
- present
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.