AGL 38.54 Increased By ▲ 0.97 (2.58%)
AIRLINK 129.50 Decreased By ▼ -3.00 (-2.26%)
BOP 5.61 Decreased By ▼ -0.03 (-0.53%)
CNERGY 3.86 Increased By ▲ 0.09 (2.39%)
DCL 8.73 Decreased By ▼ -0.14 (-1.58%)
DFML 41.76 Increased By ▲ 0.76 (1.85%)
DGKC 88.30 Decreased By ▼ -1.86 (-2.06%)
FCCL 35.00 Decreased By ▼ -0.08 (-0.23%)
FFBL 67.35 Increased By ▲ 0.85 (1.28%)
FFL 10.61 Increased By ▲ 0.46 (4.53%)
HUBC 108.76 Increased By ▲ 2.36 (2.22%)
HUMNL 14.66 Increased By ▲ 1.26 (9.4%)
KEL 4.75 Decreased By ▼ -0.11 (-2.26%)
KOSM 6.95 Increased By ▲ 0.10 (1.46%)
MLCF 41.65 Decreased By ▼ -0.15 (-0.36%)
NBP 59.60 Increased By ▲ 1.02 (1.74%)
OGDC 183.00 Increased By ▲ 1.75 (0.97%)
PAEL 26.25 Increased By ▲ 0.55 (2.14%)
PIBTL 5.97 Increased By ▲ 0.14 (2.4%)
PPL 146.70 Decreased By ▼ -1.70 (-1.15%)
PRL 23.61 Increased By ▲ 0.39 (1.68%)
PTC 16.56 Increased By ▲ 1.32 (8.66%)
SEARL 68.30 Decreased By ▼ -0.49 (-0.71%)
TELE 7.23 Decreased By ▼ -0.01 (-0.14%)
TOMCL 35.95 Decreased By ▼ -0.05 (-0.14%)
TPLP 7.85 Increased By ▲ 0.45 (6.08%)
TREET 14.20 Decreased By ▼ -0.04 (-0.28%)
TRG 50.45 Decreased By ▼ -0.40 (-0.79%)
UNITY 26.75 Increased By ▲ 0.35 (1.33%)
WTL 1.21 No Change ▼ 0.00 (0%)
BR100 9,806 Increased By 37.8 (0.39%)
BR30 29,678 Increased By 278.1 (0.95%)
KSE100 92,304 Increased By 366.3 (0.4%)
KSE30 28,840 Increased By 96.6 (0.34%)

WASHINGTON: The U.S. Department of Energy got ransom requests from the Russia-linked extortion group Cl0p at both its nuclear waste facility and scientific education facility that were recently hit in a global hacking campaign, a spokesperson said on Friday.

The DOE contractor Oak Ridge Associated Universities and the Waste Isolation Pilot Plant, the New Mexico-based facility for disposal of defense-related radioactive nuclear waste, were hit in the attack, which was first reported on Thursday.

Data was “compromised” at the two DOE entities after hackers breached their systems through a security flaw in the file transfer tool MOVEit Transfer. The software is widely-used by organisations around the world to share sensitive data.

From U.S. government departments to the UK’s telecom regulator and energy giant Shell, a range of victims have emerged since Burlington, Massachusetts-based Progress Software found the security flaw in its MOVEit Transfer product last month.

The wide-ranging impact of it shows how even the most security-minded federal agencies are struggling to defend against ransomware attacks. Ransomware gangs typically scour for such widely-used tools.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said Thursday that several federal agencies had been hit by the MOVEit breach. It did not say which ones, but added that there had not been much impact to the federal civilian executive branch.

Analysts say more victims are likely to emerge in the coming weeks.

The ransom requests to DOE came in emails to each facility, said the spokesperson, without revealing how much money was demanded. “They came in individually, not as kind of a blind carbon copy,” the spokesperson said. “The two entities that received them did not engage,” with Cl0p and there was no indication the ransom requests were withdrawn, he said.

The DOE, which manages U.S. nuclear weapons and nuclear waste sites related to the military, notified Congress of the breach and is participating in investigations with law enforcement and the CISA.

Cl0p did not respond to requests for comment, but in a post on its website, it said, “WE DON’T HAVE ANY GOVERNMENT DATA” and suggested that should the hackers inadvertently have picked up such data in their mass theft “WE STILL DO THE POLITE THING AND DELETE ALL.”

Recorded Future analyst Allan Liska said Cl0p was likely making a big deal out of how they purportedly deleted government data in an attempt to protect themselves from retaliation from Washington and other governments.

Comments

Comments are closed.