Resecurity , Inc. , which protects Fortune 100 companies and government agencies, has identified a worrying increase in ransomware attacks targeting the energy sector, including nuclear facilities and related research organizations. Over the past year, ransomware gangs have targeted energy facilities in North America, Asia, and the European Union. In the EU, Handelsblatt reported that attacks targeting the energy sector more than doubled in 2022 compared to the previous year. In fact, 21 attacks were recorded last October alone.
Resecurity ’s research delves into unique ransomware trends reported by the U.S. Department of Homeland Security. “ Between January 2020 and December 2022, the number of known ransomware attacks in the United States increased by 47% ,” according to the DHS report . Additionally, ransomware gangs managed to steal at least $449.1 million from victims in the first half of 2023.
See also: Toronto: TPL discusses ransomware attack
The significant increase in ransomware attacks against the energy sector and critical infrastructure in general is a worrying trend. Many well-known and sophisticated groups, such as BlackCat/ALPHV, Medusa and LockBit 3.0, are now targeting such organizations. These threat actors do not act in isolation. They are supported by access brokers and developers who provide the right tools to help them penetrate and exploit these key systems in critical infrastructure. The collaboration between these groups and individual actors is a clear indication of the strategic importance of the energy sector. For cybercriminals ,it is considered a “gold mine” because energy organizations are in possession of high-value data and therefore a successful attack would allow hackers to steal important data. Furthermore, the continued operation of these organizations is very important and a ransomware attack could cause disruptions that would cause enormous damage. Thus, hackers hope that energy companies may succumb to their demands and often ask for huge amounts of money as ransom, which can exceed $5,000,000 million.
Looking ahead to 2024, Resecurity analysts predict a significant increase in targeted attacks, and believe that ransomware groups will increasingly prioritize high-value targets in the energy sector and its supply chain.
See also: ICBC Bank paid to end ransomware attack
Consequences of ransomware attacks
The potential consequences of ransomware attacks on the nuclear, oil and gas industries can be devastating. In the case of nuclear power, a successful ransomware attack can lead to the loss of control of nuclear facilities, with possible consequences of the destruction of the facilities or the release of radiation. This can cause serious human losses and environmental disasters.
In the case of the oil and gas industry, ransomware attacks can cause disruptions production and supply chain, resulting in higher fuel prices and difficulty in obtaining energy supplies. In addition, attacks can cause damage to equipment and facilities, requiring expensive repairs and reconstruction.
See also: FBI: Royal ransomware has compromised 350 companies
Furthermore, ransomware attacks can have irreparable effects on the reputation and trust of companies and states. Loss of trust can lead to financial losses and loss of customers, while the reputation of companies and states can be undermined globally.
Finally, ransomware attacks can have cybersecurity and national security. Attackers can gain access to sensitive information and use it to cause further damage or blackmail states and companies.
Source: securityaffairs.com
