LockBit Ransomware Targets Marvell Technology, Threatens Data Leak

Incident Date: Jun 23, 2024

Attack Overview
VICTIM
Marvell Technology, Inc.
INDUSTRY
Manufacturing
LOCATION
USA
ATTACKER
Lockbit
FIRST REPORTED
June 23, 2024

Analysis of LockBit Ransomware Attack on Marvell Technology

Company Profile: Marvell Technology, Inc.

Marvell Technology, Inc., a prominent player in the semiconductor industry, specializes in developing advanced data infrastructure technologies. With a workforce of over 6,500 and more than 10,000 patents, Marvell reported a revenue of $5.5 billion for the fiscal year 2024. The company's expertise spans across data processing, networking, storage, and security, making it integral to the infrastructure of modern data economies and technological advancements in areas like 5G and AI.

Details of the Ransomware Attack

The LockBit3 ransomware group, known for its aggressive extortion tactics, has recently targeted Marvell Technology through an initial compromise of Allied Telesis' network. LockBit3 claims to have exfiltrated over 500 gigabytes of data from Allied Telesis, which includes sensitive data from Marvell. Despite a ransom demand of approximately US$2.9 million, Marvell has opted not to negotiate, prompting LockBit3 to threaten the release of 200GB of Marvell's project data.

Ransomware Group Profile: LockBit3

LockBit3 distinguishes itself through sophisticated attack vectors, including the exploitation of network vulnerabilities and the use of double extortion tactics. This group has been active since 2023 and has been involved in high-profile attacks on various sectors, emphasizing their capability to infiltrate and disrupt significant corporate networks.

Vulnerabilities and Industry Impact

Marvell's significant reliance on digital technologies and its vast network across various sectors increases its vulnerability to cyber-attacks. The semiconductor industry, with its complex supply chains and extensive data exchanges, presents numerous attack vectors for groups like LockBit3. This incident highlights the critical need for enhanced cybersecurity measures within the industry, especially for firms involved in high-stakes technology and infrastructure.

Sources:

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.