ABB hit by Black Basta Ransomware

upnorth

Level 68
Thread author
Verified
Top Poster
Malware Hunter
Well-known
Jul 27, 2015
5,458
Swiss multinational company ABB, a leading electrification and automation technology provider, has suffered a Black Basta ransomware attack, reportedly impacting business operations.

Headquartered in Zurich, Switzerland, ABB employs approximately 105,000 employees and has $29.4 billion in revenue for 2022. As part of its services, the company develops industrial control systems (ICS) and SCADA systems for manufacturing and energy suppliers. The company works with a wide range of customers and local governments, including Volvo, Hitachi, DS Smith, the City of Nashville, and the City of Zaragoza. On May 7th, the company fell victim to a ransomware attack conducted by Black Basta, a cybercrime group that surfaced in April 2022.

BleepingComputer has learned from multiple employees that the ransomware attack has affected the company’s Windows Active Directory, affecting hundreds of devices. In response to the attack, ABB terminated VPN connections with its customers to prevent the spread of the ransomware to other networks. BleepingComputer independently confirmed the attack from a source familiar with the situation and who asked to remain anonymous.The attack reportedly disrupts the company's operations, delaying projects and impacting the factories. BleepingComputer contacted ABB about the attack, but they declined to comment.
 

upnorth

Level 68
Thread author
Verified
Top Poster
Malware Hunter
Well-known
Jul 27, 2015
5,458
2023-05-12_05-52-20.png


At the moment, nothing new added to their official leak site. It's according to a source widespread in Sweden effecting both production and general internal connections/communications. For those that don't know, ABB is also Swedish. ASEA and the Swiss company Brown Boveri merged in 1988.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top