Ransomware Attack Hits Maritime Firm DNV

A ransomware attack recently hit the Norwegian maritime firm Det Norske Veritas (DNV). The company is one of the world’s top classification societies in the marine industry, providing certification and consulting services related to safety and performance. The firm’s IT systems were targeted by malicious actors, resulting in the halt of their IT systems, and sensitive data was encrypted by ransomware. Though the ransomware attack raised significant concerns among users, its effects were limited as the classification society has recently implemented a cybersecurity plan, launched with the aim of improving the security of their IT systems. The implementation of the plan reportedly enabled the firm to detect the attack quickly and to take steps to limit further damage. The attack process began when an unknown entity crated a user account on the company’s system with the credentials obtained from outside their perimeter. Once in the system, the attackers deployed the ransomware, which (had the capability to) spread rapidly, encrypting the data stored on the company’s systems. DNV, however, was able to contain the threat before it could cause substantial damage. According to reports, all 10,000 of the firm’s employees, as well as its customers, were impacted by the attack. Many of the firm’s digital systems, such as emails and services, were shut down due to the attack, and customers were advised to use alternative channels to contact the firm. Cyber criminals are increasingly targeting maritime companies, as these organizations have vast amounts of sensitive data that can be used to gain leverage and extort money. Organisations in the maritime industry are strongly encouraged to strengthen their security measures to prevent this type of attack in the future. Companies should implement comprehensive cybersecurity plans with advanced technologies and measures such as employee training and risk assessment to help ensure their safety and security.

This Cyber News was published on securityaffairs.com. Publication date: Sun, 22 Jan 2023 10:48:00 +0000