RA World Ransomware: TUBEX Hit
Incident Date:
April 2, 2024
Overview
Title
RA World Ransomware: TUBEX Hit
Victim
TUBEX Aluminium Tubes
Attacker
Ra Group
Location
First Reported
April 2, 2024
RA World Ransomware Attack on TUBEX Aluminium Tubes
Overview
RA World, a prominent ransomware group, has targeted TUBEX Aluminium Tubes in a recent attack. TUBEX is a leading manufacturer of aluminium tubes, specializing in cosmetics, food, pharmaceuticals, and industrial sectors. The company has over 70 years of experience and is known for its expertise in aluminium packaging, offering protection for products, the environment, and brands.
Company Profile
TUBEX Aluminium Tubes' website, showcases their product offerings and expertise in various sectors, including cosmetics, food, pharmaceuticals, and industrial applications. The company's commitment to sustainability and environmentally friendly packaging is a key differentiator in their industry.
Attack Details
The ransomware attack on TUBEX Aluminium Tubes involved the exfiltration of victims' data followed by the deployment of encryption malware. RA World maintains both TOR and non-TOR infrastructure, suggesting a sophisticated and versatile approach to their attacks.
Sources
- TUBEX Aluminium Tubes - Home: www.tubex-tube.com
- Ransomware on the Move: INC Ransom, Rhysida, Akira, RA World - https://ransomwareattacks.halcyon.ai/news/ransomware-on-the-move-inc-ransom-rhysida-akira-ra-world
- RA World attacks TUBEX Aluminium Tubes - https://ransomwareattacks.halcyon.ai/attacks/ra-world-attacks-tubex-aluminium-tubes
- Habib Karataş on LinkedIn: Habib Karataş LinkedIn Profile
- ThreatMon Advanced Ransomware Monitoring on X: "Actor : ragroup" - https://twitter.com/TMRansomMonitor/status/1782269388986499256
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.