APT73/BASHE Ransomware Hits Punjab Local Government Department
Ransomware Attack on Local Government Department, Punjab: A Cybersecurity Analysis
The Local Government Department of Punjab, India, recently fell victim to a ransomware attack that targeted its backup Customer Relationship Management (CRM) system. This attack resulted in the leak of 0.2 GB of sample screenshots as proof of the breach, raising concerns about the security of sensitive government data and potential disruptions to public services. The government has initiated an investigation with cybersecurity experts to assess the extent of the breach and prevent future attacks.
Victim Profile
The Local Government Department of Punjab operates within the governance and administrative framework of the state, focusing on decentralization and local governance. The department plays a crucial role in formulating policies, overseeing local government operations, and implementing development programs to enhance municipal infrastructure and services. Its commitment to community development and good governance distinguishes it within the public sector landscape of Punjab.
Ransomware Group Overview
The ransomware group behind the attack, APT73 / BASHE, is a newly emerged entity known for its mimicry of established models like LockBit. APT73 / BASHE adopts an Advanced Persistent Threat (APT) designation, showcasing signs of inexperience while demonstrating aggressive operational tactics. The group primarily targets organizations in North America and Europe, focusing on sectors that may have weaker cybersecurity defenses.
Company Vulnerabilities
The Local Government Department's vulnerabilities in being targeted by threat actors like APT73 / BASHE may stem from potential gaps in cybersecurity defenses, inadequate data protection measures, or vulnerabilities in their IT infrastructure. As a government entity handling sensitive information, ensuring robust cybersecurity protocols and regular security assessments is crucial to mitigate the risk of ransomware attacks.
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!