everest attacks Olamgroup

Incident Date:

August 24, 2022

World map

Overview

Title

everest attacks Olamgroup

Victim

Olamgroup

Attacker

Everest

Location

Singapore, Singapore

Singapore, Singapore

First Reported

August 24, 2022

Olam Group Suffers Ransomware Attack by Everest

Company Overview

Olam Group is a global food and agribusiness company that supplies food, ingredients, feed, and fibre to over 20,000 customers worldwide. The company's annual report for 2022 highlights their commitment to sustainability and their dedication to supporting their businesses in embracing sustainable practices.

Vulnerabilities and Impact

The ransomware group Everest, known for deploying the ALPHV ransomware, has targeted Olam Group. ALPHV is a Ransomware as a Service (RaaS) operation that supports execution on various operating systems, including Windows, Linux-based systems, and VMWare ESXi. The attackers can delete volume shadow copies, stop processes and services, and stop virtual machines on ESXi servers to maximize the amount of ransomed data.

Mitigation and Response

While the specific details of the attack on Olam Group are not available, it is crucial for companies to implement robust cybersecurity measures to protect against ransomware attacks. This includes regular software updates, employee training, and the use of reliable backup systems to minimize the impact of data loss.

Sources

  • Olam Group Limited Annual Report 2022
  • RansomLook: Groups profiles - RansomLook
  • Ransomware Posts - GitHub Pages: GitHub
  • ETC Group: FOODBARONS2022 - ETC Group

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.