Shipbuilder Fincantieri Marine Group, which has links to the US government, suffered a ransomware attack on April 12. In a statement, the company said the attack hit its email server and some network operations. Fincantieri Marine said it isolated the affected systems and brought in extra resources to tackle the issue. The company added that there was no evidence personal information was affected.
The disruption was significant, according to Carol Volk, CMO at cybersecurity provider BullWall, as it rendered critical computer numerical control manufacturing machines unusable.
Industrial control systems, and the need for early detection of threats, were highlighted by the incident, she added.
Cloud protection company Rezonate observed ransomware attacks being used to divert attention from other aims, such as creating backdoors to facilitate more lucrative attacks, said its CEO Roy Akerman. He added that ransomware was becoming a visible risk in the context of an increased risk of cyber attacks on US national security.
The attack on Fincantieri Marine comes shortly after a UK security agency warned of the threat of “state-aligned” Russian groups launching destructive attacks on critical national infrastructure.