Verweij Elektrotechniek Hit by Fog Group Ransomware, 95GB Data Compromised
Incident Date:
July 16, 2024
Overview
Title
Verweij Elektrotechniek Hit by Fog Group Ransomware, 95GB Data Compromised
Victim
Verweij Elektrotechniek
Attacker
Fog
Location
First Reported
July 16, 2024
Ransomware Attack on Verweij Elektrotechniek by Fog Group
Overview of Verweij Elektrotechniek
Verweij Elektrotechniek is a prominent electrical engineering company based in the Netherlands, specializing in energy-saving solutions and high-quality electrical installations. The firm operates in both commercial and residential construction sectors, offering services that include the design, installation, and maintenance of electrical systems. Known for its commitment to sustainability, the company employs modern technologies to optimize energy use, making it a reliable partner for organizations aiming to enhance their sustainability efforts. With a workforce of approximately 97 employees, Verweij Elektrotechniek is recognized for its customer-centric approach and innovative solutions.
Details of the Ransomware Attack
On July 17, 2024, Verweij Elektrotechniek fell victim to a ransomware attack orchestrated by the cybercriminal group known as Fog. The attack resulted in a significant data breach, compromising approximately 95GB of sensitive information. The ransomware group claimed responsibility for the attack via their dark web leak site, highlighting the growing threat of ransomware on critical infrastructure and service providers.
About the Fog Ransomware Group
Fog ransomware is a malicious software variant that emerged in November 2021, primarily targeting Windows systems. It is known for encrypting files and appending extensions such as ".FOG" or ".FLOCKED" to the affected filenames. The group has been particularly disruptive, with a significant focus on the education and recreation sectors. Attackers typically gain access to systems by exploiting compromised VPN credentials, allowing for remote infiltration. Once inside, Fog ransomware can disable Windows Defender, encrypt Virtual Machine Disk (VMDK) files, delete backups, and remove volume shadow copies, making recovery extremely difficult.
Potential Vulnerabilities and Penetration Methods
Verweij Elektrotechniek's focus on innovative and tailored electrical solutions may have made it an attractive target for the Fog ransomware group. The company's extensive use of modern technologies and digital systems could have presented vulnerabilities that the attackers exploited. The ransomware group likely penetrated the company's systems by exploiting compromised VPN credentials, a common method used to gain unauthorized access to networks. The attack underscores the importance of robust cybersecurity measures, especially for companies involved in critical infrastructure and service delivery.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.