Sysroad Targeted: LockBit3 Ransomware Attack
Ransomware Attack on Sysroad by LockBit3
Victim Overview
Sysroad, a private company founded in 2013, specializes in the integration of high-value-added IT and telecoms solutions. Known as a leader in their field, Sysroad employs between 51 and 200 people. The company offers a range of services related to system administration and road traffic management, including traffic control systems, toll collection systems, parking management systems, and intelligent transportation systems. Additionally, they provide consulting services for system design, implementation, and maintenance, as well as training programs for professionals in the field.
Attack Overview
The LockBit3 ransomware group targeted Sysroad.com, leaking data and demanding a ransom. The cybercriminals threatened to publish the company's sensitive information if the ransom was not paid by a specified deadline. Reports indicate that LockBit3 has caused around twenty victims in Senegal, including Sysroad.
Ransomware Group Profile
LockBit3, also known as LockBit Black, is a Ransomware-as-a-Service (RaaS) group that continues the legacy of LockBit and LockBit 2.0. This group is considered one of the most dangerous and disruptive ransomware threats currently active. LockBit3 encrypts files, modifies filenames, changes desktop wallpapers, and drops ransom notes on victims' desktops. The ransomware is heavily obfuscated and protected against analysis, making it difficult for security researchers to study and counter.
Company Vulnerabilities
Sysroad's role in integrating high-value-added IT and telecoms solutions may have made them a target for threat actors like LockBit3. The company's involvement in system administration and road traffic management involves handling sensitive data and critical infrastructure, increasing their vulnerability to cyberattacks. Furthermore, Sysroad's size and industry leadership could have attracted ransomware groups seeking high-profile targets.
Sources:
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!