Norsk Hydro Security Incident

Live Demo: The Nozomi Networks Platform in 15 Minutes Watch Academy Labs Careers Partner Login Support Request Demo Breaking Research: LockerGoga Ransomware Impacts Norsk Hydro by Alessandro Di Pinto | March 19, 2019 This article was updated on March 3, 2020. It has been reported today that Norsk Hydro either switched to manual mode or temporarily stopped aluminum production at several plants following a cyberattack. The Norwegian National Security Authority and local media in Norway describe the incident as a ransomware attack by a malware called LockerGoga. The attack has apparently brought the companys IT systems to a standstill. Given the significance of this attack, Nozomi Networks Labs has conducted a preliminary evaluation of LockerGoga. Read on to learn about this ransomware and our research teams assessment of it. Ransomware Attack Impacts Aluminum Production According to media reports, the malware attack began on the evening of Monday, March 18 th , 2019 Oslo time (UTC + 1). On March 19 th, 2019, the companys website was not available and production impacts had been reported: Potlines, which monitor molten aluminum, and need to be kept running 24 hours a day, had been switched to manual mode Some factories have been forced to halt production Several metal extrusion plants have been closed At certain facilities, some computer systems are unavailable, and printed orders are being fulfilled Power plants are functioning normally No safety-related incidents have been reported Updated March 22, 2019: What is the LockerGoga Ransomware? Nozomi Networks Labs has conducted a preliminary analysis of a LockerGoga sample with the SHA256: 6e69548b1ae61d951452b65db15716a5ee2f9373be05011e897c61118c239a77 The ransomware can encrypt files with any of the specific extensions listed below: doc, dot, wbk, docx, dotx, docb, xlm, xlsx, xltx, xlsb, xlw, ppt, pot, pps, pptx, potx, ppsx, sldx, pdf We have also analyzed the latest version of the LockerGoga sample with the...

... (truncated for display)