DragonForce Hits Nunziaplast Italian Manufacturer in Ransomware Attack
DragonForce Ransomware Group Targets Italian Manufacturer Nunziaplast
Nunziaplast S.r.l., a well-established Italian company specializing in thermoplastic moulding, has recently fallen victim to a ransomware attack orchestrated by the DragonForce group. This incident highlights the growing threat of ransomware attacks on manufacturing sectors, particularly those embracing Industry 4.0 technologies.
Company Profile: Nunziaplast S.r.l.
Founded in 1975 and based in Castelcovati, Brescia, Nunziaplast operates in the plastics manufacturing industry, focusing on injection moulding. The company employs around 50 internal staff and 100 external personnel, indicating a significant operational scale. Nunziaplast's commitment to quality is evident in its use of advanced robotic systems and a dedicated workshop for mould maintenance. Financially, the company reported a turnover of €11 million in 2021, marking a 19.28% increase from the previous year. This growth underscores its strong market position.
Attack Overview
The DragonForce ransomware group claims to have exfiltrated 73.8 GB of sensitive data from Nunziaplast's systems. The group has threatened to release this data publicly within the next few days, posing significant risks to the company's operations and reputation. The attack underscores vulnerabilities in Nunziaplast's cybersecurity infrastructure, potentially linked to its integration of smart factory solutions.
About DragonForce Ransomware Group
Emerging in late 2023, DragonForce has quickly gained notoriety for its sophisticated attack methods and connections to existing ransomware families like LockBit. Operating on a Ransomware-as-a-Service model, the group allows affiliates to customize attacks using modified ransomware tools. DragonForce employs a double extortion strategy, exfiltrating data before encryption to increase pressure on victims. The group is known for its use of advanced tools such as SystemBC and Mimikatz, enhancing its operational capabilities.
Potential Vulnerabilities and Penetration Methods
Nunziaplast's adoption of Industry 4.0 technologies, while enhancing operational efficiency, may have inadvertently exposed vulnerabilities. The integration of smart factory solutions like GP Progetti's eNX® Full Suite could have been exploited by DragonForce to gain unauthorized access. The group's use of sophisticated malware and credential harvesting tools suggests a well-coordinated attack, potentially leveraging weak points in the company's cybersecurity defenses.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!