Ransomware Attack on Seaway Manufacturing Corp. by FOG Group

Seaway Manufacturing Corp., a prominent manufacturer of vinyl replacement windows, patio doors, and sunrooms, has recently fallen victim to a ransomware attack by the FOG group. The company, established in 1959 and headquartered in Erie, Pennsylvania, is known for its commitment to quality and customer satisfaction. This attack has raised significant concerns about the security measures in place at Seaway Manufacturing.

Company Overview

Seaway Manufacturing Corp. is a privately held, woman- and family-owned business led by CEO Jana Goodrich. The company has built a strong reputation over its 65 years of operation, focusing on enhancing the aesthetic appeal and energy efficiency of homes. Seaway's products, including their notable sunrooms, are designed to provide homeowners with affordable and maintenance-free living spaces. The company operates through a network of authorized dealers across the eastern and central United States, ensuring a consistent supply of high-quality products.

Attack Overview

The FOG ransomware group has claimed responsibility for the attack on Seaway Manufacturing Corp. via their dark web leak site. The attackers assert that they have gained access to sensitive data, potentially compromising the company's operations and customer information. The ransomware encrypts files and appends extensions such as ".FOG" or ".FLOCKED" to the affected filenames, making recovery challenging without the decryption key.

FOG Ransomware Group

FOG ransomware emerged in November 2021 and primarily targets Windows systems. The group is known for its disruptive attacks, particularly in the education and recreation sectors. FOG ransomware typically gains access to systems by exploiting compromised VPN credentials, allowing for remote infiltration. Once inside, the ransomware can disable security measures, encrypt critical files, and delete backups, making recovery extremely difficult. The ransom demands are usually made in Bitcoin, with no guarantee of file restoration even if the ransom is paid.

Potential Vulnerabilities

Seaway Manufacturing's reliance on a network of authorized dealers and its significant workforce may have contributed to its vulnerability. The use of VPNs for remote access, if not properly secured, can be a potential entry point for ransomware attacks. Additionally, the lack of effective backup and recovery solutions can exacerbate the impact of such attacks, leaving the company at the mercy of the attackers.

Sources

• Seaway Manufacturing Corp.
• PCRisk - FOG Ransomware
• WatchGuard - FOG Ransomware
• BeforeCrypt - FOG Ransomware