Malware · high
ActiveCloud ransomware attack disrupts Belarusian businesses
Tier B · Patch this week – Put it in the sprint
Who’s exposed: ActiveCloud customers in Belarus relying on its cloud services
Tier B because: Exploited in the wild OR public exploit
Reach
Attack
Damage
Fix
Exploited in the wild
The Brief
- ActiveCloud, a Belarusian cloud provider, said hackers breached its systems and encrypted parts of its cloud infrastructure.
- Customers were unable to access key services for several days.
- The sources do not describe the attack vector or whether a fix is available.
Why it matters
Developers relying on ActiveCloud-hosted infrastructure may face prolonged service disruption, and the incident shows how ransomware on a cloud provider can spread downtime to its customers.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | Judgment: ActiveCloud is a cloud services firm whose customers' businesses depend on it for key services. |
| No | Core infrastructure | Judgment: a regional Belarusian cloud firm, not core infrastructure like a major cloud platform or OpenSSH. |
| No | Popular tool | Judgment: a niche regional provider, not a widely used framework, tool or platform. |
| Yes | Exploited in the wild | The Record: ActiveCloud said hackers breached its systems and encrypted parts of its cloud infrastructure. |
| No | Public exploit | The Record: no source mentions published exploit code or proof-of-concept. |
| No | Remote, no login | The Record: sources do not describe the attack vector or whether credentials were needed. |
| No | Full takeover | The Record: sources do not state code execution, root or admin rights were obtained. |
| No | Secrets exposed | The Record: sources report encryption and outages, not theft or exposure of credentials or customer data. |
| No | Supply chain | The Record: sources describe a ransomware breach, not malicious code shipped through a trusted channel. |
| No | No fix yet | The Record: sources do not say whether a patch or fix exists for the attack vector. |
Timeline
ActiveCloud reports ransomware attack and encrypted cloud infrastructure; customers lose access to key services for several days
The Record from Recorded Future News
Ransomware attack on Belarusian cloud firm disrupts businesses for days
Source
Ransomware attack on Belarusian cloud firm disrupts businesses for days ↗ The Record from Recorded Future News · 1h ago
First seen · 1 source · Full story page · How tiers are decided