Raffmetal Spa Hit by DragonForce Ransomware Attack: 149GB Data Compromised
Raffmetal Spa Targeted by DragonForce Ransomware Attack
Overview of Raffmetal Spa
Raffmetal Spa, headquartered in Valsabbia, Italy, is Europe's largest producer of aluminum alloys for remelting. Established in 1976 and part of the Silmar Group, the company operates several advanced production facilities covering approximately 145,000 square meters. Raffmetal specializes in recycling aluminum scrap into high-quality secondary alloys, with a strong commitment to sustainability and innovation. Their SILVAL aluminum alloys, derived from recycled materials, are particularly popular in the automotive sector for their low carbon footprint.
Details of the Attack
The ransomware group DragonForce has claimed responsibility for a recent cyberattack on Raffmetal Spa. The attackers reportedly compromised around 149.71 GB of sensitive data and are threatening to release this information publicly if their demands are not met within 11 days. The breach is currently under investigation, and Raffmetal is working to mitigate the effects and strengthen its cybersecurity measures.
About DragonForce Ransomware Group
DragonForce is a relatively new ransomware group that emerged in late 2023. They are known for using double extortion tactics, encrypting victims' data and exfiltrating sensitive information, which they threaten to release publicly if the ransom is not paid. The group has claimed several high-profile attacks across various industries and countries. Their ransomware code is based on a leaked builder from the infamous LockBit ransomware group, suggesting a sophisticated approach to their operations.
Potential Vulnerabilities
Raffmetal's advanced technological infrastructure, while a strength, may also present vulnerabilities that can be exploited by sophisticated threat actors like DragonForce. The company's extensive use of continuous casting technology and rigorous scrap treatment processes require robust cybersecurity measures to protect against potential breaches. The attack underscores the importance of continuous improvement in cybersecurity practices, especially for companies operating in critical sectors like manufacturing and recycling.
Conclusion
The ransomware attack on Raffmetal Spa by DragonForce highlights the growing threat of cyberattacks on critical industries. As Raffmetal works to address the breach and enhance its cybersecurity, the incident serves as a stark reminder of the need for vigilance and robust security measures in the face of evolving cyber threats.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!