Ragnar Locker Attacks Greek Gas Company Desfa

Daniel ZimmermannAugust 25, 2022

0 125 1 minute read

The cyber gang behind the Ragnar Locker ransomware attacked the Greek state company Desfa, the exclusive operator of the Greek national gas transmission system, which is responsible for its development and operation. Desfa operates both the country’s natural gas transmission system and gas distribution networks.

As a reminder, we also reported that Phineas Fisher contacted the media and offered $100,000 to hackers that would attack banks and oil companies.

Desfa reported last weekend that it had been hit by a hacker attack that affected the availability of some systems and also led to a data breach. Representatives of Desfa wrote that the company had to temporarily deactivate some IT services to contain the incident, but they are already returning to normal operation.

We have been able to ensure and continue the safe and reliable operation of the National Natural Gas Supply System (NNGS). NNGS continues to operate smoothly and Desfa continues to supply natural gas to all entry and exit points in the country in a safe and proper manner.the company assured.

Now the extortionist group Ragnar Locker has claimed responsibility for this attack. The hacker’s Tor website posted a claim that they hacked into the company and stole confidential corporate data. The hackers write that they contacted the company to report a “serious vulnerability” that led to a hack, but did not receive a response.

I must say that this is not surprising, because in an official statement, representatives of the company emphasized: “Desfa remains firm in its position not to negotiate with cybercriminals.”

With no response from Desfa, the Ragnar Locker operators decided to start releasing the stolen data. The attackers have already posted on their website a list of stolen data, as well as a set of files that, according to media reports, do not contain any classified information.

The attackers continued to threaten Desfa and promise to make all the data publicly available if the company continues to ignore them.

The cybergang behind the Ragnar Locker ransomware has published more than 360 gigabytes of data allegedly stolen from Greece’s largest natural gas supplier Desfa.Securityweek reports.

Ragnar Locker attacked Desfa

In March, the FBI warned that Ragnar Locker had compromised at least 52 sites in 10 critical infrastructure sectors and that the cyber gang frequently changed its obfuscation methods to avoid detection and prevention. While it is not clear how the cybercriminals were able to compromise Desfa, they have previously been seen targeting Remote Desktop Protocol (RDP) connections for intrusion and then deploying a custom virtual machine to perform malicious activities seamlessly.

Sending