Ransomware Group Targets TUBEX Aluminium Tubes

Ransomware group RA World has added TUBEX Aluminium Tubes to its list of victims, although no further information is available. TUBEX has been manufacturing aluminum tubes for more than 70 years. In collaboration with its partners, it develops pioneering packaging that shapes the industry. It has three production locations and four sales offices and offers its customers the largest production capacities in the world.

The RA World Ransomware Gang

The RA World (previously the RA Group) ransomware gang has successfully breached entities around the globe since it first reared its ugly head in April 2023. This ransomware group first exfiltrates victims’ data, then deploys its encryption malware. The group behind it maintains both TOR and non-TOR websites for leaking stolen data. Moreover, the ransomware is programmed to eliminate Volume Shadow Copies and system backups, stopping any attempts at system recovery in their tracks.

Infection Pathway and Impact

Specific details regarding the infection pathway utilized by the RA World are not available. However, it is unlikely to deviate significantly from methods employed by other ransomware collectives. Instances of RA World ransomware have been identified through submissions to a publicly accessible file scanning service originating from various countries, including the Netherlands, France, the United Kingdom, the Czech Republic, Poland, Colombia, and Japan.

At present, the data leak sites associated with the ransomware name 23 victims distributed across several countries, including Germany, the UK, the US, Italy, Poland, India, Taiwan, Mexico, France, Thailand, and Korea.