Critical Infrastructure segments such as oil and gas, water, and wastewater treatment facilities, energy generation systems, and government bodies now bear the full brunt of cyberattacks. Ransomware attacks in countries such as the United States, United Arab Emirates, and India continue to rise rapidly. In the past week, prominent manufacturers around the globe succumbed to such vicious attacks and ended up having their data breached and published on the dark web despite payments of ransom. In the attacks analyzed from the previous week, we have seen extensive usage of triple extortion techniques in ransomware attacks, advanced spearphishing techniques including reply chain phishing, and an increased layer of sophistication in malwares.
Geopolitical tensions in Europe are now as high as they have ever been in light of the Ukraine-Russia conflict, resulting in a significant deterioration of security in cyberspace. Government bodies, websites, financial organizations, and much more fell victims to large-scale DDoS attacks. These cyberattacks have also extended their reach in compromising and manipulating vital data of GPS-enabled IoT telematics in and around the Baltic area, halting or delaying several ongoing operations. In the past, Sectrio has crossed paths with similar incidents involving yachts, ships, and even airplanes, where such unsecured systems lead to chaotic disruptions. With no horizon in sight of resolution of the ongoing conflict, we urge all to be on guard in the following weeks.
In the Asia Pacific region, Sectrio has observed participation of APT groups 37, 38, and 41 in the rising geopolitical tensions in the west. This threat could also engulf the surrounding nations, such attacks can act as tactical leverage during times of crisis. Looking back, Sectrio has seen instances of such attacks, including the cyberattacks logged on October 25th in India.
Regardless of size or cyber fortification systems, we urge all critical infrastructure segments, manufacturers, governments, IT/business firms, and financial institutions to stay on guard in the weeks ahead.
Weekly advisory
Segments under this list must be on high alert in the coming weeks:
- Financial Services
- Manufacturing
- Critical Infrastructure
- Water and wastewater treatment facilities
- Supply chains
- Energy Sector
- Oil and gas
- Utility entities
- Maritime agencies
- Healthcare
- Government Agencies