Two companies - managed service provider Everis (an NTT DATA company) and the largest radio station in Spain, Cadena SER have been hit by a serious ransomware attack on the same day - November 4. Both companies have disconnected all their computers and networks from the Internet.
Further details about the radio station are not public yet, but it has been announced that Everis was infected by BitPaymer ransomware - just like French TV station M6 and German manufacturer Pilz. The attack was targeted, as indicated by the .3v3r1s extension attached to encrypted files and the attackers demanded €750,000 to unlock the files. Many Spanish companies use Everis software for day-to-day activities, and there were some who feared they might have been infected, opting to shut down operations to inspect systems.