Ransomware Attack on The Plastic Bag Company by Sarcoma Group
Ransomware Attack on The Plastic Bag Company by Sarcoma Group
The Plastic Bag Company Pty Ltd, a prominent player in the Australian manufacturing sector, has recently fallen victim to a ransomware attack by the newly emerged cybercriminal group, Sarcoma. This incident highlights the increasing threat posed by ransomware groups targeting diverse industries.
Company Profile and Industry Standing
Located in Smithfield, New South Wales, The Plastic Bag Company specializes in the production of plastic bags and related products. The company is known for its comprehensive manufacturing process, which includes film extrusion, printing, and bag formation. This vertical integration allows for greater control over quality and supply chain efficiency, establishing the company as a key player in the Australian market. Despite its operational scale, the company’s focus on traditional manufacturing processes may have left it vulnerable to modern cyber threats.
Details of the Ransomware Attack
The attack on The Plastic Bag Company was executed by Sarcoma, a ransomware group that has quickly gained notoriety for its aggressive tactics. On October 10, Sarcoma listed the company on its dark web portal, claiming to have exfiltrated 3.6 GB of sensitive data, including tax returns and passport scans. The group has threatened to release more data within 26 days, although no specific ransom demand has been made public. This attack underscores the group's strategy of leveraging data leaks as a means of coercion.
Sarcoma Ransomware Group: Tactics and Characteristics
Sarcoma distinguishes itself by employing a double extortion strategy, which involves both encrypting data and threatening to leak it publicly. The group has targeted a wide range of industries, with a notable presence in Australia and New Zealand. Sarcoma's operations are characterized by their lack of publicly listed ransom amounts, focusing instead on exposing poor security practices among organizations. The group's darknet leak site serves as a platform to list victims and provide evidence of stolen data.
Potential Vulnerabilities and Penetration Methods
While specific details of how Sarcoma penetrated The Plastic Bag Company's systems remain unclear, common vulnerabilities in manufacturing sectors include outdated software, insufficient network segmentation, and inadequate employee training on cybersecurity practices. These factors may have contributed to the company's susceptibility to the attack, emphasizing the need for enhanced security measures in the industry.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!