Tag Archive for: industrial

Industrial and Commercial Bank of China suffers ransomware attack; trades in US Treasury market disrupted: Report


Industrial and Commercial Bank of China (ICBC), the country’s largest commercial lender by assets, reportedly suffered a ransomware attack on Thursday that disrupted the trades in the US Treasury market. However, the impact of the ransomware attack seemed to be limited, Reuters reported.

In a statement, ICBC Financial Services said a ransomware attack resulted in disruption to certain systems and it was conducting an investigation and “progressing its recovery efforts.”

The bank said it had successfully cleared Treasury trades executed on Wednesday and repurchase agreements (repo) financing trades done on Thursday.

The Treasury trades executed on Wednesday and repurchase agreements (repo) financing trades done on Thursday had been successfully cleared, the bank said.

(Exciting news! Mint is now on WhatsApp Channels :rocket: Subscribe today by clicking the link and stay updated with the latest financial insights! Click here!)

Bloomberg reported citing people familiar with the situation that a prolific criminal gang known as Lockbit is suspected to have orchestrated the hack.

According to some market participants, trades going through ICBC were not settled due to the attack and this affected market liquidity, Reuters reported.

In ransomware attacks, hackers encrypt an organization’s systems and demand ransom payments in exchange for unlocking them. 

The Financial Times earlier had reported that the US Securities Industry and Financial…

Source…

Industrial Giant ABB Confirms Ransomware Attack, Data Theft


Swiss industrial giant ABB confirmed this week that it was recently targeted in a ransomware attack and that the cybercriminals exfiltrated some data.

The company has issued a press release and an FAQ describing the incident, with many details — including indicators of compromise (IoCs) — being withheld due to the ongoing law enforcement investigation. 

“ABB has determined that an unauthorized third-party accessed certain ABB systems, deployed a type of ransomware that is not self-propagating, and exfiltrated certain data,” ABB said. “The company is working to identify and analyze the nature and scope of affected data and is further assessing its notification obligations.” 

The malware was allegedly only deployed on a ‘limited number’ of servers and endpoints. The malware was distributed via manual intervention and it could not automatically spread through emails or on the local network, ABB said.

“All of ABB’s key services and systems are up and running, all factories are operating, and the company continues to serve its customers. The company also continues to restore any remain- ing impacted services and systems and is further enhancing the security of its systems,” the company noted.

In private notifications sent to customers, ABB said its forensic investigation found no evidence of customer systems being directly impacted. In addition, there is no indication that it’s unsafe to connect to ABB systems. 

Bleeping Computer was the first to report that ABB was targeted by the Black Basta ransomware group. Kevin Beaumont, a reputable cybersecurity researcher, has independently confirmed it

Advertisement. Scroll to continue reading.

Beaumont said on Friday that the company has paid the ransom, which would explain why it has not been named on Black Basta’s leak website. 

SecurityWeek reached out to ABB for comment on these claims, but the company said it’s not commenting beyond the information in its press release. 

ABB provides electrification and automation solutions in many countries around the world. The company has more than 100,000 employees. 

Related: Ransomware Gang Leaks Files Stolen From Industrial Giant Parker Hannifin

Related:

Source…

Premio RCO-3000-CML Industrial Computer | Security Info Watch


Greater Los Angeles, CALIFORNIA, March 22, 2023Premio Inc., a global leader in rugged edge and embedded computing technology, today reveals the RCO-3000-CML small form factor PC. Supported by Intel 10th generation Comet Lake embedded processors, the all-new RCO-3000-CML is a fanless industrial computer balancing processing performance and modular I/O configurability.

Demonstrations of this new system will occur in booth #3071 at the International Security Conference & Exposition 2023 (ISC West) at the Venetian Expo in Las Vegas, Nevada, from March 29 – 31.

Newly integrated Premio EDGEBoost I/O modules offer modular expansion flexibility for increased connectivity, integration, and automation. Access to Power-over-Ethernet (PoE) technology allows both power and ethernet data to pass through a single cable. Cabling costs are reduced, and the system is poised for greater scalability – optimal considerations for security and surveillance analytics deployments, as well as computer and machine vision, industrial automation, and manufacturing applications. 

“Power-over-Ethernet is a key feature in many Industry 4.0 applications that connect to IoT sensors and cameras for computer vision and edge AI analytics,” said Dustin Seetoo, Premio’s product marketing director. “Security and surveillance applications benefit from a single, centralized rugged embedded computer – managing multiple devices through PoE, and creating a robust solution for real-time processing closer to IoT devices and sensors.” 

With PoE support, the RCO-3000-CML presents more options for wired connectivity to critical IoT sensors and peripherals. With the addition of Intel® 10th Generation CPUs in a low 35W TDP, the RCO-3000-CML series can support powerful multi-core CPU options ranging from Intel Core i3, i5, i7, and even Xeon-W processors.   

“By focusing on even greater processing power in a small form factor design, the RCO-3000-CML is an industrial computer that delivers x86 performance, I/O connectivity, and hardened reliability for the most intensive workloads at the rugged edge,” added Seetoo. “Our embedded engineers ensure a balance of key technologies…

Source…

Ransomware Attacks on Industrial Firms Increased by 87% in 2022


Ransomware attacks against industrial organizations increased by 87% in 2022 from the year before, with most malicious software targeting the manufacturing sector, according to findings published Tuesday.

Hackers last year targeted mining industries in Australia and New Zealand, and continued their focus on renewable energy companies in the US and the European Union, the cybersecurity firm Dragos Inc. said in a report. Attackers also increased or accelerated their attacks on energy, food, water, electrical and natural gas sectors, the company determined.

Source…