Largest U.S. Pipeline Shuts Down Operations After Ransomware Attack
Colonial Pipeline, the largest fuel pipeline in the United States, has shut down operations after suffering what is reported to be a ransomware attack.
Colonial Pipeline transports refined petroleum products between refineries located in the Gulf Coast and markets throughout the southern and eastern United States. The company transports 2.5 million barrels per day through its 5,500 mile pipeline and provides 45% of all fuel consumed on the East Coast.
Also Read: 4 Best Practices On How To Use SkillsFuture Credit
According to a report by CNBC, Colonial Pipeline suffered a ransomware attack yesterday that forced them to shut down their entire network to prevent the spread of the malware.
Today, Colonial Pipeline issued a statement confirming the attack and stated that they temporarily shut down their pipeline operations while responding to the attack.
“On May 7, the Colonial Pipeline Company learned it was the victim of a cybersecurity attack. In response, we proactively took certain systems offline to contain the threat, which has temporarily halted all pipeline operations, and affected some of our IT systems.”
“Upon learning of the issue, a leading, third-party cybersecurity firm was engaged, and they have already launched an investigation into the nature and scope of this incident, which is ongoing,” Colonial Pipeline said in a statement.
DarkSide ransomware believed to be responsible
A US official has told the Washington Post that it is believed that the DarkSide ransomware operation is behind the attack.
BleepingComputer was the first to report about the DarkSide ransomware operation, which launched in the middle of August 2020.
Like other enterprise-targeting ransomware operations, when DarkSide gains access to a corporate network, they will quietly spread to other devices while gathering credentials and stealing unencrypted documents.
Once they gain access to Windows domain credentials, they will deploy the ransomware throughout the network to encrypt devices.
If DarkSide conducted the attack, the threat actors likely stole data, which will be used to extort Colonial Pipeline in their ransom demands.
High profile attacks previously conducted by the DarkSide gang include CompuCom, Discount Car and Truck Rentals, Brookfield Residential, and Brazil’s Companhia Paranaense de Energia (Copel).
Also Read: 3 Reasons Why You Must Take A PDPA Singapore Course
5/8/21: Added possible attribution to DarkSide ransomware
0 Comments