blackbasta attacks SMART Mechanical Solutions
Incident Date:
October 12, 2022
Overview
Title
blackbasta attacks SMART Mechanical Solutions
Victim
SMART Mechanical Solutions
Attacker
Blackbasta
Location
First Reported
October 12, 2022
SMART Mechanical Solutions Targeted by BlackBasta Ransomware Group
Company Overview
SMART Mechanical Solutions is a full-service company that provides mechanical, electrical, and plumbing (MEP) services for various industries, including construction. The company's website does not provide detailed information about its size or specific services, but it does mention that they are a "one-stop-shop" for MEP services.
Industry Standout
In the construction sector, SMART Mechanical Solutions stands out for its comprehensive range of services, which includes design, installation, and maintenance of MEP systems. The company's website highlights its commitment to quality, safety, and customer satisfaction.
Vulnerabilities
The specific vulnerabilities that led to the ransomware attack on SMART Mechanical Solutions are not publicly disclosed. However, the attack could be related to the company's use of network-connected devices, such as torque wrenches, which are known to be vulnerable to ransomware attacks. The attack chain, as described by Kyle Hendrickson, could involve an unauthenticated attacker gaining access to the company's network and exploiting software bugs to install ransomware.
Response and Mitigation
Nozomi Networks, an IT security company, has reported 25 vulnerabilities in Bosch Rexroth's Linux-based NEXO-OS operating system, which could be exploited to gain access to network-connected torque wrenches and install ransomware. Affected users are recommended to restrict network reachability to the affected Bosch Rexroth products until a fix is available.
SMART Mechanical Solutions has not issued a public statement about the ransomware attack or the measures they are taking to mitigate the damage. The company's website does not provide information about their cybersecurity practices or any certifications they may hold.
Sources
- Hackers Can Breach a Smart Wrench. It Should Worry You, Even If Your Business Never Needs This Tool.
- Ransomware on cyber-physical systems: Taxonomies, case studies, and future directions.
- SMART Mechanical Solutions - HackNotice.
- Kyle Hendrickson.
- Network-Connected Torque Wrench Used in Factories Is Vulnerable to Ransomware.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.