Ransomware Attack on The Plastic Bag Company by Sarcoma Group
Incident Date:
October 9, 2024
Overview
Title
Ransomware Attack on The Plastic Bag Company by Sarcoma Group
Victim
The Plastic Bag
Attacker
Sarcoma
Location
First Reported
October 9, 2024
Ransomware Attack on The Plastic Bag Company by Sarcoma Group
The Plastic Bag Company Pty Ltd, a prominent player in the Australian manufacturing sector, has recently fallen victim to a ransomware attack by the newly emerged cybercriminal group, Sarcoma. This incident highlights the increasing threat posed by ransomware groups targeting diverse industries.
Company Profile and Industry Standing
Located in Smithfield, New South Wales, The Plastic Bag Company specializes in the production of plastic bags and related products. The company is known for its comprehensive manufacturing process, which includes film extrusion, printing, and bag formation. This vertical integration allows for greater control over quality and supply chain efficiency, establishing the company as a key player in the Australian market. Despite its operational scale, the company’s focus on traditional manufacturing processes may have left it vulnerable to modern cyber threats.
Details of the Ransomware Attack
The attack on The Plastic Bag Company was executed by Sarcoma, a ransomware group that has quickly gained notoriety for its aggressive tactics. On October 10, Sarcoma listed the company on its dark web portal, claiming to have exfiltrated 3.6 GB of sensitive data, including tax returns and passport scans. The group has threatened to release more data within 26 days, although no specific ransom demand has been made public. This attack underscores the group's strategy of leveraging data leaks as a means of coercion.
Sarcoma Ransomware Group: Tactics and Characteristics
Sarcoma distinguishes itself by employing a double extortion strategy, which involves both encrypting data and threatening to leak it publicly. The group has targeted a wide range of industries, with a notable presence in Australia and New Zealand. Sarcoma's operations are characterized by their lack of publicly listed ransom amounts, focusing instead on exposing poor security practices among organizations. The group's darknet leak site serves as a platform to list victims and provide evidence of stolen data.
Potential Vulnerabilities and Penetration Methods
While specific details of how Sarcoma penetrated The Plastic Bag Company's systems remain unclear, common vulnerabilities in manufacturing sectors include outdated software, insufficient network segmentation, and inadequate employee training on cybersecurity practices. These factors may have contributed to the company's susceptibility to the attack, emphasizing the need for enhanced security measures in the industry.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.