Lynx Ransomware Hits Model Die & Mold in Cyberattack

Incident Date: Nov 05, 2024

Attack Overview
VICTIM
Model Die & Mold
INDUSTRY
Manufacturing
LOCATION
USA
ATTACKER
Lynx
FIRST REPORTED
November 5, 2024

Ransomware Attack on Model Die & Mold by Lynx Group

The Lynx ransomware group has claimed responsibility for a cyberattack on Model Die & Mold, a well-established company in the manufacturing sector. This incident highlights the growing threat of ransomware attacks on mid-sized enterprises, particularly those in critical manufacturing industries.

About Model Die & Mold

Model Die & Mold, Inc., based in Grand Rapids, Michigan, has been a key player in the mold manufacturing industry since its founding in 1966. The company specializes in designing and manufacturing various types of molds, including compression molds, plastic injection molds, and die cast dies. With a workforce of 51 to 200 employees, Model Die & Mold is known for its advanced technological capabilities, utilizing CAD/CAM technology to enhance precision and efficiency. The company serves several industries, including automotive, aerospace, and architectural markets, and is recognized for its commitment to quality and innovation.

Attack Overview

The ransomware attack was discovered on November 6, when Lynx claimed to have exfiltrated data from Model Die & Mold's systems. While the exact size of the data leak remains undisclosed, the breach poses significant risks to the company's operational integrity and client confidentiality. The attackers have not yet revealed the specific data obtained, leaving the extent of the compromise uncertain. This incident underscores the vulnerabilities faced by manufacturing companies, which often rely on complex IT infrastructures that can be targeted by sophisticated threat actors.

About Lynx Ransomware Group

Lynx ransomware, which emerged in 2024, operates under a Ransomware-as-a-Service model, utilizing both single and double extortion techniques. The group is believed to be a rebranding of the INC ransomware, sharing similarities in source code. Lynx primarily targets Windows environments, using phishing campaigns and malicious downloads as initial infection vectors. The group is known for its aggressive tactics, including listing victims on its TOR-hosted leak site if ransom demands are not met. Lynx's ability to customize its malware for precise control over targeted files and directories makes it a formidable threat in the cybersecurity landscape.

Potential Vulnerabilities

Model Die & Mold's reliance on advanced technology and data analytics for predictive maintenance may have inadvertently exposed vulnerabilities that Lynx exploited. The company's integration of various IT systems, while enhancing production efficiency, could have provided multiple entry points for the ransomware group. This attack serves as a reminder of the importance of cybersecurity measures, particularly for companies in the manufacturing sector that handle sensitive client data and proprietary designs.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.