hiveleak attacks Soucy
Incident Date:
May 26, 2022
Overview
Title
hiveleak attacks Soucy
Victim
Soucy
Attacker
Hiveleak
Location
First Reported
May 26, 2022
Soucy Group Suffers Ransomware Attack by Hiveleak
Company Overview
Soucy Group is a cast iron specialist with a wide range of manufacturing expertise, working together to develop innovative solutions suitable for various industries. The company's website showcases its capabilities in creating solutions tailored to different sectors, emphasizing its commitment to innovation and collaboration.
Company Size and Industry Standout
The size of Soucy Group is not explicitly mentioned in the search results. However, the company's website suggests that it is a significant player in the manufacturing sector, with a focus on providing customized solutions for various industries.
Vulnerabilities and Targeting
The specific vulnerabilities that led to the Soucy Group's ransomware attack are not detailed in the search results. However, the attack by Hiveleak indicates that the company may have been targeted due to its presence in the manufacturing sector, which is a common target for ransomware groups.
Hiveleak and Ransomware Attacks
Hiveleak is a ransomware group that has been active since at least 2020, distributing ransomware through a Ransomware as a Service (RaaS) model. The group's ransomware, known as BlackCat, is written in the Rust programming language and supports execution on various operating systems, including Windows, Linux, and VMWare ESXi.
Mitigating Ransomware Attacks
While the article does not include general information about mitigating ransomware attack risks, it is essential for companies to implement robust cybersecurity measures, such as regular software updates, employee training, and multi-factor authentication, to reduce the risk of ransomware attacks.
Sources
- Soucy Group Website: www.soucy-group.com
- Dragos Blog: dragos.com/blog/
- NGAUS Newsroom: ngaus.org/newsroom/guard-team-wins-cyber-competition-3rd-consecutive-year
- RansomLook: groups
- Ransomware Posts: ransomposts
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.