Applexus Technologies Suffers Ransomware Attack by Clop Group

Applexus Technologies, a prominent provider of SAP software solutions and consulting services for businesses, has recently fallen victim to a ransomware attack orchestrated by the Clop ransomware group. This incident was disclosed on the Clop leak site, which also highlighted that Applexus operates within the Business Services sector and maintains a global presence.

Company Profile

With operations spanning more than 5 countries and serving over 100 customers across 6 industries, Applexus Technologies stands as a global entity specializing in SAP consulting and implementation. The company offers a wide range of services, including S/4HANA business cases and roadmaps, SAP implementation projects, high-value add-on IP solutions, and premium SAP Application Management Services. Furthermore, Applexus boasts a diverse product portfolio that encompasses AI-powered SAP-based solutions, next-generation vendor invoice management systems, AI-powered digital store and consumer experience platforms, and comprehensive solutions designed to automate and optimize export and import processes.

Details of the Attack

The Clop ransomware attack on Applexus Technologies is a part of a broader offensive by the Sangria Tempest threat actor group, which has been deploying Clop ransomware since late 2021. This group primarily targets organizations within the banking, retail, and hospitality sectors to achieve financial gain. Despite a temporary setback in June 2021, when Operation Cyclone led by INTERPOL resulted in the arrest of individuals associated with money laundering for the group in Ukraine, the Clop ransomware group resumed its activities in April 2022. Since then, it has targeted several organizations, including a global technology company, a Middle Eastern supermarket chain, a Canadian technology company, and an American distributor of physical security systems.

As of now, Applexus Technologies has not issued a public statement regarding the ransomware attack. The specifics regarding how the attackers gained access to the company's systems and the extent of data or systems compromised remain undisclosed.

Sources

• INTERPOL Official Website - https://www.interpol.int
• SAP Official Website - https://www.sap.com