{"id":98707,"date":"2023-03-24T10:10:02","date_gmt":"2023-03-24T03:10:02","guid":{"rendered":"https:\/\/advantage.vn\/?p=98707"},"modified":"2023-03-29T15:19:52","modified_gmt":"2023-03-29T08:19:52","slug":"maersk-says-posted-data-is-not-current-and-not-from-attack-by-hackers","status":"publish","type":"post","link":"https:\/\/advantage.vn\/en\/maersk-says-posted-data-is-not-current-and-not-from-attack-by-hackers\/","title":{"rendered":"Maersk says posted data is not current and not from attack by hackers"},"content":{"rendered":"

Maersk denies it has been cyber-attacked by hacker group Anonymous Sudan, despite leaked customer credentials appearing on social media.<\/strong><\/p>\n

The group posted a .txt file with several usernames and passwords of Maersk customers on its telegram channel, alongside AI art and threats of attacks against other Swedish and Danish companies, citing as its motivation \u201ctheir burning of the Quran\u201d.<\/p>\n

\u201cWe have more data, this is just a sample,\u201d read the post, but Maersk says it is not obvious whether the data is current.<\/p>\n

Spokesman Jonatan Rying Larsen said: \u201cThere is no indication of any breach or compromise of Maersk systems.<\/p>\n

\"maersk<\/p>\n

\u201cWe are aware of a claim that data purporting to be ours has been published by cyber criminals. There is evidence of credentials belonging to a very limited number of both active and inactive individual customers have been obtained by cyber criminals outside our systems. This was immediately identified and countered by our side.<\/p>\n

\u201cWe take data leaks extremely seriously and will be investigating this fully.\u201d<\/p>\n

It is possible the data is the aftermath of the 2017 NotPetya ransomware attack against Maersk, which locked the company\u2019s systems. In a \u2018double extortion\u2019 ransomware attack, data such as passwords is first copied by hackers and then encrypted for ransom.<\/p>\n

\u201cThere is a possibility this could be previous data from a double ransomware attack,\u201d Ken Munro, of PenTestPartners, told The Loadstar. \u201cIf the data is current, it is indicative of a current breach. But it could be that someone stumbled onto the data on the dark web and assumed it was current. Data on the dark web is difficult to attribute and date.\u201d<\/p>\n

\u201cIt could be one of their shipping agents that\u2019s been breached. That is probably more likely, as Maersk has spent a lot of time and money improving cybersecurity.\u201d<\/p>\n

\"cyberattack\"<\/p>\n

A February report by German cybersecurity firm Truesec suggests that, far from being motivated by Islamic fundamentalism, Anonymous Sudan is a Russian state-sponsored hacker organisation using a plausibly deniable cover to interfere with Sweden\u2019s application to join NATO.<\/p>\n

The Maersk news occurs against a backdrop of increased cyber-risk in shipping following a DNV hack this year and a growing emphasis on targeting shipping for financial gain, according to an ENISA report this week.<\/p>\n

\u201cCriminals follow the money,\u201d said Mr Munro. \u201cIf you\u2019re looking to make a lot of money, you\u2019d be better off looking at an industry where a lot of money is transacted and has less mature cybersecurity systems. Maritime\u2026 is a distributed, complicated, global network with multiple points of entry, multiple ways to get things wrong and, perhaps, a historic unwillingness to invest in cybersecurity.\u201d<\/p>\n

theloadstar.com<\/strong><\/p>\n

>> Other news:\u00a0<\/strong><\/span><\/p>\n