Groupe Corbat Suffers Ransomware Attack by LockBit2

Company Overview

Groupe Corbat, a Swiss company that focuses on construction and wood products, has been targeted by the LockBit2 ransomware group. The company's website highlights its commitment to sustainable and responsible forest management, emphasizing the unique qualities of wood as a building material. The company's history and expertise in the industry are showcased, indicating a strong presence and reputation in the construction sector.

Attack Details

The LockBit2 ransomware group has claimed responsibility for the attack on Groupe Corbat. The group is known for its ransomware-as-a-service (RaaS) operations, where it licenses its code to affiliates who launch attacks against companies, steal their data, and attempt to extort money from them. The group has been active since 2019 and has been responsible for a significant number of ransomware attacks, targeting various industries and organizations globally.

Vulnerabilities and Mitigation

The specific vulnerabilities that led to the attack on Groupe Corbat are not detailed in the available information. However, ransomware attacks typically exploit unpatched software, unsecured networks, or weak passwords. To mitigate the risk of ransomware attacks, companies should ensure their software is up-to-date, implement strong password policies, and regularly back up their data to minimize the impact of an attack.

LockBit2's Recent Activity

LockBit2 has recently resurfaced after a law enforcement takedown, claiming to have restored their infrastructure and invited affiliates to re-join the group. The group has been experiencing difficulties in attracting and retaining affiliates, and has shown technical difficulties with its leak sites, leading to delays in the release of a new ransomware variant.

The ransomware attack on Groupe Corbat by LockBit2 highlights the ongoing threat of ransomware to businesses and organizations. Companies should remain vigilant and implement robust cybersecurity measures to protect against such attacks.

Sources

• Groupe Corbat: https://www.groupe-corbat.ch
• LockBit Ransomware Gang Resurfaces With New Leak Site: https://www.securityweek.com/lockbit-ransomware-gang-resurfaces-with-new-site/
• The Notorious Lockbit Ransomware Gang Has Been Disrupted: https://www.wired.com/story/lockbit-ransomware-takedown-website-nca-fbi/
• LockBit Ransomware Group Resurfaces After Law Enforcement Takedown: https://thehackernews.com/2024/02/lockbit-ransomware-group-resurfaces.html?m=1
• What Is LockBit Ransomware?: https://www.blackberry.com/us/en/solutions/endpoint-security/ransomware-protection/lockbit