Verweij Elektrotechniek Hit by Fog Group Ransomware, 95GB Data Compromised

Incident Date: Jul 16, 2024

Attack Overview
VICTIM
Verweij Elektrotechniek
INDUSTRY
Construction
LOCATION
Netherlands
ATTACKER
Fog
FIRST REPORTED
July 16, 2024

Ransomware Attack on Verweij Elektrotechniek by Fog Group

Overview of Verweij Elektrotechniek

Verweij Elektrotechniek is a prominent electrical engineering company based in the Netherlands, specializing in energy-saving solutions and high-quality electrical installations. The firm operates in both commercial and residential construction sectors, offering services that include the design, installation, and maintenance of electrical systems. Known for its commitment to sustainability, the company employs modern technologies to optimize energy use, making it a reliable partner for organizations aiming to enhance their sustainability efforts. With a workforce of approximately 97 employees, Verweij Elektrotechniek is recognized for its customer-centric approach and innovative solutions.

Details of the Ransomware Attack

On July 17, 2024, Verweij Elektrotechniek fell victim to a ransomware attack orchestrated by the cybercriminal group known as Fog. The attack resulted in a significant data breach, compromising approximately 95GB of sensitive information. The ransomware group claimed responsibility for the attack via their dark web leak site, highlighting the growing threat of ransomware on critical infrastructure and service providers.

About the Fog Ransomware Group

Fog ransomware is a malicious software variant that emerged in November 2021, primarily targeting Windows systems. It is known for encrypting files and appending extensions such as ".FOG" or ".FLOCKED" to the affected filenames. The group has been particularly disruptive, with a significant focus on the education and recreation sectors. Attackers typically gain access to systems by exploiting compromised VPN credentials, allowing for remote infiltration. Once inside, Fog ransomware can disable Windows Defender, encrypt Virtual Machine Disk (VMDK) files, delete backups, and remove volume shadow copies, making recovery extremely difficult.

Potential Vulnerabilities and Penetration Methods

Verweij Elektrotechniek's focus on innovative and tailored electrical solutions may have made it an attractive target for the Fog ransomware group. The company's extensive use of modern technologies and digital systems could have presented vulnerabilities that the attackers exploited. The ransomware group likely penetrated the company's systems by exploiting compromised VPN credentials, a common method used to gain unauthorized access to networks. The attack underscores the importance of robust cybersecurity measures, especially for companies involved in critical infrastructure and service delivery.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.