alphv attacks Long Fence

Incident Date:

February 28, 2022

World map

Overview

Title

alphv attacks Long Fence

Victim

Long Fence

Attacker

Alphv

Location

Edgeworth, USA

Maryland, USA

First Reported

February 28, 2022

Long Fence Suffers Ransomware Attack by Alphv Group

Long Fence, a prominent entity in the construction sector, has fallen victim to a ransomware attack orchestrated by the Alphv group, also known as LockBit. This incident was disclosed on their dark web leak site. Currently, attempts to access the company's official website yield a 403 Forbidden error, indicating potential ongoing issues resulting from the attack.

As a manufacturer of fencing products, Long Fence specializes in high-security perimeter solutions for critical infrastructure, including prisons, military installations, and utility facilities. The breach underscores the critical vulnerabilities associated with the use of outdated software within industrial networks. Specifically, the attack was facilitated through a compromised Windows 7 PC, which was still in operation and connected to the company's manufacturing machinery. This situation exemplifies the heightened risks that unsupported and vulnerable devices pose to supply chain security.

The Alphv ransomware group, responsible for this attack, has been a significant player in the ransomware landscape, particularly affecting regions such as Australia, Canada, New Zealand, and the United States. Operating on a Ransomware-as-a-Service (RaaS) model, Alphv has successfully extorted over $91 million in ransom payments from its victims. This attack on Long Fence serves as a stark reminder of the critical need for organizations to maintain updated software and implement comprehensive cybersecurity strategies to safeguard against such threats. Effective supplier cybersecurity risk management is essential for minimizing the potential repercussions of ransomware attacks on business operations and reputation.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.