Italian energy company ERG reports "only a few minor disruptions" affecting its information and communications technology (ICT) infrastructure after a ransomware attack.
While the Italian renewable energy group was cited as a hacking attack, La Repubblica reported that the attack was coordinated by the LockBit 2.0 ransomware group.
The LockBit ransomware gang began operating in September 2019 and announced the launch of the LockBit 2.0 ransomware-as-a-service in June 2021.
See also: Vaccine registration system in Italy hit by ransomware attack
See also: Microsoft on BazarCall: Initial attacks can lead to ransomware within 48 hours
Services were not interrupted
“Regarding recent media rumors of hacking attacks on institutions and companies, ERG reports that it has only encountered a few minor disruptions to its ICT infrastructure, which have currently been overcome, also thanks to the immediate deployment of internal cybersecurity procedures,” the company said today.
“The company confirms that all of its factories are operating smoothly and have not suffered any disruption, ensuring continuous business operations.”
ERG is the leading Italian wind energy operator and one of the top ten onshore operators in the European market, with a growing presence in France, Germany, Poland, Romania, Bulgaria and the United Kingdom.
The group operates in the sectors of wind energy, hydroelectric energy, solar energy and high-efficiency cogeneration thermal energy.
In related news, the Italian region of Lazio has suffered a ransomware attack by the RansomEXX group which has disabled the region's IT systems, including the Salute Lazio health portal used to register COVID-19 vaccines.
See also: Ransomware: Common ways hackers break into a network
The RansomEXX gang, the main suspect behind the Lazio attack, began operating as Defray in 2018, but, in June 2020, it renamed itself RansomEXX and began focusing on targeting large corporate organizations.
Once RansomEXX threat actors gain access to a victim's network, they spread laterally through the network while stealing sensitive documents to use as blackmail leverage.
Information source: bleepingcomputer.com
