Verweij Elektrotechniek Hit by Fog Group Ransomware, 95GB Data Compromised
Ransomware Attack on Verweij Elektrotechniek by Fog Group
Overview of Verweij Elektrotechniek
Verweij Elektrotechniek is a prominent electrical engineering company based in the Netherlands, specializing in energy-saving solutions and high-quality electrical installations. The firm operates in both commercial and residential construction sectors, offering services that include the design, installation, and maintenance of electrical systems. Known for its commitment to sustainability, the company employs modern technologies to optimize energy use, making it a reliable partner for organizations aiming to enhance their sustainability efforts. With a workforce of approximately 97 employees, Verweij Elektrotechniek is recognized for its customer-centric approach and innovative solutions.
Details of the Ransomware Attack
On July 17, 2024, Verweij Elektrotechniek fell victim to a ransomware attack orchestrated by the cybercriminal group known as Fog. The attack resulted in a significant data breach, compromising approximately 95GB of sensitive information. The ransomware group claimed responsibility for the attack via their dark web leak site, highlighting the growing threat of ransomware on critical infrastructure and service providers.
About the Fog Ransomware Group
Fog ransomware is a malicious software variant that emerged in November 2021, primarily targeting Windows systems. It is known for encrypting files and appending extensions such as ".FOG" or ".FLOCKED" to the affected filenames. The group has been particularly disruptive, with a significant focus on the education and recreation sectors. Attackers typically gain access to systems by exploiting compromised VPN credentials, allowing for remote infiltration. Once inside, Fog ransomware can disable Windows Defender, encrypt Virtual Machine Disk (VMDK) files, delete backups, and remove volume shadow copies, making recovery extremely difficult.
Potential Vulnerabilities and Penetration Methods
Verweij Elektrotechniek's focus on innovative and tailored electrical solutions may have made it an attractive target for the Fog ransomware group. The company's extensive use of modern technologies and digital systems could have presented vulnerabilities that the attackers exploited. The ransomware group likely penetrated the company's systems by exploiting compromised VPN credentials, a common method used to gain unauthorized access to networks. The attack underscores the importance of robust cybersecurity measures, especially for companies involved in critical infrastructure and service delivery.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!