Octapharma Plasma likely victim of ransomware attack

More than 150 blood plasma donation centers across the US operated by Octapharma Plasma have shut down due to network issues suspected to be caused by a ransomware attack, The Register reports.

See also: Hive ransomware: 10 million reward for information on its members

No further details were given about the incident, with parent company Octapharma Group noting that updates will be rolled out via its app, social media, website and email. However, a source familiar with the matter said VMware have been targeted by a ransomware attack by the BlackSuit.

"If they don't restore the systems, they will need to close their laboratories in Europe, as more than 75 percent of their plasma comes from the US," the source said.

See also: Knight ransomware: Source code for sale

Such an incident comes months after the U.S. Department of Health and Human Services warned health and public health agencies about the double-extortion attack tactics used by BlackSuit in its attacks. BlackSuit was previously reported to be a possible successor to Royal ransomware due to code similarities between the two strains.

Ransomware attacks, such as the one on Octapharma Plasma, usually begin with a malicious piece of software infiltrating system . This can be done through a seemingly harmless email or a dangerous link. When ransomware enters the system, it begins encrypting files and data. This means that the files become readable only with a special encryption key. After encrypting the files, the ransomware then displays a message to the user, demanding a ransom payment to restore access to their files.

See also: Carolina Foods company fell victim to ransomware attack

Typically, attackers demand payment via anonymous digital currencies, such as Bitcoin, to avoid detection. It is important to note that paying the ransom does not always guarantee the restoration of files.

Source: scmagazine