Oil & Gas Archives - Page 6 of 11

Oil Terminals In Europe Suffer Cyberattack

January 27, 2022

Major oil terminals in Western Europe’s largest ports have fallen victim to a cyberattack, sources confirmed.
Belgian prosecutors launched an investigation into the hacking of oil facilities in the country’s maritime entryways, including Antwerp, Europe’s second largest port after Rotterdam. In Germany, prosecutors said they were investigating a cyberattack targeting oil facilities in what was described as a possible ransomware strike, in which hackers demand money to reopen hijacked networks.

Gas Supplier Hit In Ransomware Attack

December 12, 2021

Toronto, Canada-based Superior Plus Corp. revealed the company suffered a ransomware attack Sunday, which had an impact on the firm’s computer systems.
Upon learning of the incident, the company said it took steps to secure its systems and mitigate the impact on its data and operations. Superior retained independent cybersecurity experts to help deal with the matter in accordance with industry best practices.
Superior temporarily disabled certain computer systems and applications as it investigates this incident and is in the process of bringing these systems back online.

Saudi Aramco Data Breach

June 23, 2021

Saudi Aramco, the state oil company of Saudi Arabia, was the focus of a $50 million data breach.
Aramco is describing the attack as an indirect release of a limited amount of company data held by third-party contractors. Saudi Aramco said there was no breach of its systems and said the attack had no impact on its operations. However, it became aware of the indirect release of a limited amount of company data which was held by third-party contractors.
A listing for the stolen data was posted on June 23.

Colonial Pipeline Ops Shut Down after Ransomware Attack

May 7, 2021

Colonial Pipeline, which operates a major pipeline system that transports fuel across the East Coast, fell victim to a ransomware attack Friday and halted all pipeline operations while it dealt with the incident, company officials said. Colonial Pipeline did not say what was demanded or who made the demand. Ransomware attacks are typically carried out by criminal hackers who seize data and demand a large payment in order to release it.

UPDATE: The FBI has established that the DarkSide is to blame for the assaults. The DarkSide appears to be unaffiliated with any nation-states, claiming in a statement that “our purpose is to generate money [not to create] issues for society” and that it is apolitical. DarkSide announced its closure in the aftermath of the pipeline assault.

Oil Drilling Company, Gyrodata, Hit By Ransomware

February 21, 2021

On February 21, Gyrodata discovered it was the target of a ransomware attack. In response, the company immediately took steps to secure its systems, launched an investigation, and a cybersecurity firm was engaged to assist with its investigation.

Shell A Victim In Accellion Incident

March 16, 2021

Shell is the latest company to fall victim in a data security incident involving Accellion’s File Transfer Appliance (FTA). Like other companies within the manufacturing automation sector, Shell said in an advisory it published March 16 it uses the FTA appliance to securely transfer large data files.

Oil Company SCADA System Impacted by RF Interference

January 1, 1989

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

CIA Trojan Causes Siberian Gas Pipeline Explosion

January 1, 1982

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Telco Shuts Off Critical SCADA Comms

January 1, 2003

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Slammer Infected Laptop Shuts Down DCS

January 1, 2003

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.