NSK Group ROTA Targeted by Lynx Ransomware Attack
Ransomware Attack on NSK Group ROTA by Lynx: A Detailed Analysis
NSK Group ROTA, a leading Turkish manufacturer in the automotive parts sector, has recently fallen victim to a ransomware attack orchestrated by the Lynx group. This incident highlights the growing threat of cyberattacks on the manufacturing industry, emphasizing the need for robust cybersecurity measures.
About NSK Group ROTA
Established in 1950, NSK Group ROTA is renowned for its production of steering, suspension, hydraulic, and forged components for commercial, agricultural, and construction vehicles. With two production facilities in Bursa, Turkey, and sales offices in Istanbul, New Jersey, and São Paulo, the company exports 85% of its products to over 100 countries. Employing approximately 207 people, NSK Group ROTA is recognized for its commitment to quality and innovation, holding certifications such as ISO 9001 and TS 16949.
Attack Overview
The Lynx ransomware group claims to have infiltrated NSK Group ROTA's systems, exfiltrating sensitive data. This breach potentially jeopardizes the company's operations and data security. The attack underscores the vulnerabilities within the manufacturing sector, which can be exploited by sophisticated cybercriminals.
About Lynx Ransomware Group
Lynx, a relatively new player in the ransomware landscape, emerged in July 2024. Known for its aggressive tactics, Lynx employs a double extortion strategy, exfiltrating data before encrypting files and threatening to leak the information if ransoms are not paid. The group operates under a ransomware-as-a-service model, allowing other cybercriminals to use its ransomware for a fee. Lynx's technical sophistication includes the use of AES-128 and Curve25519 encryption algorithms.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!