n0n ransomware reaches 40+ shipping firms via maritime IT supplier
Original title: Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies
Victims were listed on October 12; the claimed ransom total is $1.2 billion, and most data was leaked.
The n0n ransomware and extortion group listed more than 40 port authorities, maritime firms, and shipping companies on its leak site on October 12. CyDome says half are known customers of South Korean maritime IT provider CyberLogitec, whose site has been down for weeks, suggesting a supply-chain pivot. The group demands a claimed $1.2 billion; most refused and had data leaked. Victims span 18 countries.
Unconfirmed: CyberLogitec as the intrusion source is inferred, not confirmed by the company; the $1.2 billion total is a leak-site claim.
- The final payment deadline expired on October 19.
- CyDome says half the batch are known CyberLogitec customers.
- n0n launched in mid-September and already lists more than 140 victims.
- Most listed companies refused to pay and had data leaked.
Impact: Ransomware extortion and leaked data from maritime firms
- Threat actors
- n0n
- Victims
- CyberLogitec
- Organizations
- CyDome
- Countries
- South Korea
From the original article
14 min read at news.risky.biz
In other news: Pentagon builds tech sabotage unit; PHP2Shell exploitation gets underway; GoDaddy revokes 400,000 certs.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.