Malware: Company, Switzerland 2023
A person reporting the incident discovered unauthorised access to his Linux server.
- Incident · 05.2023 · Switzerland
- Evidence: confirmed by an authority
- Malware
As of
What happened
The attackers installed utilities and Docker and downloaded software for which advertising networks pay for bandwidth and computing time. In this way, they made money with the hijacked server instead of stealing data.
- Affected
- Company (anonymous)
- Industry
- other industry
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- unauthorised access to Linux server (route not stated)
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Expensive calls, cryptojacking, misused computing power
Mostly no information 5 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Not every attack targets data: stolen computing power and bandwidth are also a business for criminals.
Sources
- Wochenrückblick Woche 21: Gehackte Linux-Server als Geldesel (opens in a new window) Bundesamt für Cybersicherheit BACS (bis 2023: NCSC) · 30.05.2023
«In einem kürzlich beim NCSC eingegangen Fall bemerkte der Meldende einen unautorisierten Zugriff auf seinen Linux-Server.»