LockBit, the Russian-linked ransomware group, has claimed responsibility for a ransomware attack on Indian pharmaceutical giant Granules India, publishing some of the data it stole.
Granules India has been listed on LockBit’s dark web as a victim of its ransomware attack.
The pharmaceutical giant has not yet confirmed the ransomware attack, but last month it disclosed to Indian stock exchanges about a cybersecurity incident, “The company is investigating the matter on a high priority basis. Containment and remediation actions are being undertaken in a controlled manner to address the incident.”
Granules India was founded in 1984 and is one of India’s largest pharmaceutical manufacturers, producing many off-patent drugs such as paracetamol, metformin, and ibuprofen.
Lockbit has been deemed the most widespread ransomware variant in the world so far, according to a joint statement from the US federal agency for cybersecurity CISA and its counterparts in Australia, Canada, France, Germany, New Zealand and the United Kingdom. The ransomware group was first identified in January 2020, in Russian-language cybercrime forums and has extorted a total of about $91 million through its 1,700 attacks worldwide.
In recent months, members of the LockBit group have claimed several attacks on major technology companies, including the British postal service Royal Mail, technology manufacturer Foxconn, the California Department of Finance.
In the meantime, the US Department of Justice has arrested and charged a Russian citizen, Ruslan Magomedovich Astamirov, with having carried out at least 5 ransomware attacks as an affiliate of the LockBit ransomware between August 2020 and last March. Astamirov is the third person accused of being part of the LockBit ransomware group and the second to be arrested.
CISA for the US and its international counterparts have recommended installing up-to-date antivirus software (not to mention Endpoint Security applications such as Machine Learning Intrusion Detection Systems), installing browser sandboxing, installing web application firewalls, multi-factor authentication, and other security measures
LockBit, the Russian-linked ransomware group, has claimed responsibility for a ransomware attack on Indian pharmaceutical giant Granules India, publishing some of the data it stole.
Granules India has been listed on LockBit’s dark web as a victim of its ransomware attack.
The pharmaceutical giant has not yet confirmed the ransomware attack, but last month it disclosed to Indian stock exchanges about a cybersecurity incident, “The company is investigating the matter on a high priority basis. Containment and remediation actions are being undertaken in a controlled manner to address the incident.”
Granules India was founded in 1984 and is one of India’s largest pharmaceutical manufacturers, producing many off-patent drugs such as paracetamol, metformin, and ibuprofen.
Lockbit has been deemed the most widespread ransomware variant in the world so far, according to a joint statement from the US federal agency for cybersecurity CISA and its counterparts in Australia, Canada, France, Germany, New Zealand and the United Kingdom. The ransomware group was first identified in January 2020, in Russian-language cybercrime forums and has extorted a total of about $91 million through its 1,700 attacks worldwide.
In recent months, members of the LockBit group have claimed several attacks on major technology companies, including the British postal service Royal Mail, technology manufacturer Foxconn, the California Department of Finance.
In the meantime, the US Department of Justice has arrested and charged a Russian citizen, Ruslan Magomedovich Astamirov, with having carried out at least 5 ransomware attacks as an affiliate of the LockBit ransomware between August 2020 and last March. Astamirov is the third person accused of being part of the LockBit ransomware group and the second to be arrested.
CISA for the US and its international counterparts have recommended installing up-to-date antivirus software (not to mention Endpoint Security applications such as Machine Learning Intrusion Detection Systems), installing browser sandboxing, installing web application firewalls, multi-factor authentication, and other security measures