Ransomware Attack on Manufacturing Network Pte Ltd by 3AM Group

Incident Date: Sep 30, 2024

Attack Overview
VICTIM
Manufacturing Network Pte Ltd
INDUSTRY
Manufacturing
LOCATION
Singapore
ATTACKER
3am
FIRST REPORTED
September 30, 2024

Ransomware Attack on Manufacturing Network Pte Ltd by 3AM Group

Manufacturing Network Pte Ltd (MNPL), a prominent player in Singapore's manufacturing sector, has recently fallen victim to a ransomware attack orchestrated by the 3AM group. The attack, discovered on October 1, has raised concerns about the vulnerabilities faced by companies in the manufacturing industry.

About Manufacturing Network Pte Ltd

Established in November 2000, MNPL specializes in the import, export, and processing of non-ferrous metals, with a strong focus on aluminum alloys. The company operates metal service centers that stock, distribute, and cut aluminum alloy plates, sheets, and extrusion bars. MNPL's commitment to high-quality materials and precision engineering has positioned it as a significant player in the aluminum alloy market in Singapore. The company's ability to provide tailored solutions through its service centers makes it a versatile entity in the industry.

Attack Overview

The ransomware attack on MNPL was claimed by the 3AM group, a relatively new threat actor in the cybercrime landscape. The extent of the data leak remains unclear, but the company's website, mnpl.com.sg, was identified as part of the compromised assets. The attack highlights the vulnerabilities that manufacturing companies face, particularly those with significant digital footprints and reliance on IT infrastructure for operations.

About the 3AM Ransomware Group

The 3AM group has distinguished itself by targeting sectors such as manufacturing, leveraging sophisticated techniques to infiltrate networks. The group is known for employing double extortion tactics, where data is exfiltrated before encryption, and victims are threatened with data publication unless a ransom is paid. The group's ability to penetrate systems often involves exploiting weak credentials and using phishing campaigns to gain initial access.

Potential Vulnerabilities

MNPL's reliance on digital systems for inventory management and customer service may have made it an attractive target for the 3AM group. The company's extensive network of international suppliers and clients could also present additional entry points for cybercriminals. The attack underscores the importance of comprehensive cybersecurity measures, particularly for companies in the manufacturing sector that handle sensitive data and rely on continuous operations.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.