Mantinga Faces Ransomware Threat from Hunters International
Ransomware Attack on Mantinga: A Deep Dive into the Hunters International Breach
On November 18, Mantinga, a leading Lithuanian food and beverage manufacturing company, became the latest victim of a ransomware attack orchestrated by the notorious Hunters International group. Known for its extensive range of frozen bakery and convenience food products, Mantinga has established itself as a significant player in the Baltic States' manufacturing sector. The attack has raised concerns about the vulnerabilities of even well-established companies in the face of sophisticated cyber threats.
Company Profile: Mantinga's Industry Standing
Founded in 1998 in Marijampolė, Lithuania, Mantinga has grown to become the largest producer of bread, snacks, and frozen products in the Baltic States. The company operates multiple production facilities, including three factories in Marijampolė and a recently acquired plant in Latvia, covering a total production area of over 41,000 square meters. With a product range featuring over 1,000 items and exports to nearly 40 countries, Mantinga is recognized for its innovation and commitment to quality. This extensive operational scale and international reach make Mantinga a lucrative target for cybercriminals.
Attack Overview: Hunters International's Modus Operandi
The attack on Mantinga involved data exfiltration and encryption, a hallmark of Hunters International's double extortion tactics. The group's ability to penetrate Mantinga's systems suggests potential vulnerabilities in the company's cybersecurity infrastructure, possibly through phishing campaigns or exploitation of remote services. The attack disrupted Mantinga's website, mantinga.lt, highlighting the operational impact of such breaches.
Hunters International: A Rising Threat
Emerging in October 2023, Hunters International quickly gained notoriety by leveraging code from the dismantled Hive ransomware operation. As a Ransomware-as-a-Service (RaaS) group, they employ affiliates globally to execute attacks, focusing on industries like manufacturing, healthcare, and finance. Their use of Rust-developed ransomware allows for cross-platform targeting, enhancing their adaptability and threat level. The group's sophisticated techniques, including the use of custom malware like SharpRhino, enable them to bypass advanced security measures, as seen in previous high-profile attacks.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!