LockerGoga Ransomware sends Norsk Hydro in manual mode



[ad_1]

One of the world's largest aluminum producers, Nork Hydro, was forced to switch to manual operations as a result of a cyberattack that would have pushed the LockerGoga ransomware.

The company announced today that it was the target of a large-scale cyber attack, which began late Monday night, at 16:00 Paris time, affecting most computer systems. business sectors.

LockerGoga ransomware is relatively new on the scene. It was first observed in January in an attack on Altran Technologies, a global engineering consulting firm headquartered in Paris, France.

NorCERT warns companies against LockerGoga's attack

According to NRK, NorCERT alerted a number of partners about the LockerGoga ransomware, warning that Norsk Hydro was one of its victims.

The notification from the Norwegian cybersecurity body indicates that the attack involved Active Directory – used to authenticate and authorize all users and systems on a Windows domain network.

"NorCERT warns that Hydro is exposed to a LockerGoga attack.This attack was combined with an attack on Active Directory (AD)," reads in the alert.

However, Håkon Bergsjø, head of NorCERT, would not confirm for NRK that the attack was on Active Directory servers in the case of Norsk Hydro.

BleepingComputer contacted NorCERT but received no response at the time of publication.

Details of Norsk Hydro Mum on the attack

In public statements released today, Norks Hydro has not commented on the nature of the attack but has described the critical situation in which an attack is currently located, "striving to contain and neutralize the attack ".

The company has informed the relevant authorities and in an official update on Facebook that it "switches to manual operations as far as possible".

The cyberattack, which has affected the activities of many industries around the world, has not put people at risk.

An badessment of the situation is still ongoing, the company also trying to determine the impact on the customers.

Power plants that operate on isolated networks are functioning normally, the company said. This could indicate that the computer management systems are perhaps the ones that are taking the shock because the company's website is currently down, indicating a 404 error.

More details from Norsk Hydro will be available at a press conference scheduled for 16:00.

[ad_2]
Source link