During the attack on the Semyonishna plant, which occurred earlier in December, the unidentified hacker group encrypted the company’s systems with a LockBit ransomware strain, the regional office of Russia’s security service (FSB) said in a comment last Friday to local news website Kommersant. According to Valery Levitsky, director of the Russian dairy company Sayanmoloko, which owns the plant, the attack caused all company printers to churn out leaflets condemning its contributions to the Russian army. Local media reported that the cyberattack on the company’s systems occurred shortly after it provided humanitarian aid, including drones, for Russian soldiers fighting in Ukraine. At that time, the company’s chief executive said in an interview with local media that he believed Western intelligence agencies were involved in the attack and warned other food processing enterprises against using Western software and equipment. According to Levitsky, the attack didn’t affect milk processing but did disrupt the company’s ability to label products under Russia’s government-run tracking system designed to combat counterfeit goods and ensure product safety. The Semyonishna plant, located in the Russian republic of Khakassia, is a major producer of dairy products — including milk, butter, sour cream, curd, yogurt, dry milk and cheese — in the region. Last week, a pro-Ukraine hacking group claimed responsibility for a cyberattack on CarMoney, a Russian microfinance company linked to the former wife of President Vladimir Putin. Earlier in July, another Russian dairy producer suffered a ransomware attack that halted cheese production and shipments for a month. Earlier this year, a group of hackers with unknown ties claimed responsibility for breaching Rosreestr, a Russian government agency responsible for managing property and land records. Local media reports suggest that the breach could be connected to the plant's support for Russian troops in Ukraine. One of Russia’s major agro-industrial companies was also targeted by a ransomware attack in April, with hackers demanding nearly $6 million in ransom to decrypt the company's data. “The message accused our company of helping the Russian government fund its budget and feed the population, saying that this money goes toward the war and the killing of Ukrainian citizens,” he said.
This Cyber News was published on therecord.media. Publication date: Tue, 25 Feb 2025 16:15:10 +0000