lockbit3 attacks emun works
Incident Date:
July 31, 2022
Overview
Title
lockbit3 attacks emun works
Victim
emun works
Attacker
Lockbit3
Location
First Reported
July 31, 2022
Ransomware Attack on EMUN Works
Overview of the Incident
Ransomware group Lockbit3 has recently taken responsibility for a cybersecurity breach targeting EMUN Works, a prominent entity in the Media & Internet sector. EMUN Works, known for its comprehensive Commerce, Order-Entry, Sales Management, & CRM solutions tailored for Wholesalers, has been a significant player in the industry for over two decades. The company boasts a commendable customer retention rate, with partnerships spanning 10 to 20 years, underscoring its commitment to collaboration and honesty in business operations.
Analysis of the Attack
The specifics of the vulnerabilities exploited during the attack on EMUN Works remain undisclosed. Nonetheless, it is widely acknowledged that ransomware perpetrators frequently exploit unpatched systems and misconfigured platforms. These include, but are not limited to, cloud-based collaboration tools and inadequate perimeter defenses. Ransomware attacks encrypt critical files and demand a ransom for their decryption. Failure to comply often results in the permanent loss of data or its sale on the dark web.
Preventative Measures
To mitigate the risk of ransomware attacks, it is imperative for organizations to maintain up-to-date operating systems and software, implement robust backup strategies, and continuously assess their security posture. Protecting all potential entry points is crucial, with a particular emphasis on email security, given its prevalence as a vector for cyber-attacks. Comprehensive defense strategies should include the deployment of antimalware solutions, multifactor authentication, firewalls, email and web filtering, network traffic analysis, application allowlisting/denylisting, endpoint detection and response (EDR), and secure remote access technologies.
The ransomware attack on EMUN Works underscores the critical need for stringent cybersecurity measures. In an era where digital threats are increasingly sophisticated, adopting a defense-in-depth approach to security is non-negotiable for organizations aiming to safeguard their assets and maintain trust with their clients.
Sources
- Cybersecurity & Infrastructure Security Agency (CISA) - https://www.cisa.gov/ransomware
- National Institute of Standards and Technology (NIST) - https://www.nist.gov/topics/cybersecurity
- Europol - Internet Organised Crime Threat Assessment (IOCTA) - https://www.europol.europa.eu/activities-services/main-reports/internet-organised-crime-threat-assessment-iocta
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.