Uppco
June 23, 2022
•[ ransomware, malware, energy ]
Lorenz executed exfiltration of data and ransomeware in targeted network. Data presented on dark web "leak site"
Entega
June 12, 2022
•[ hack, energy ]
Entega, a German energy supplier is hit by a cyber attack that mainly affected the firm's website and staff email accounts.
Mainzer Stadtwerke
June 12, 2022
•[ hack, energy ]
Mainzer Stadtwerke, an additional German energy supplier is hit by a cyber attack that mainly affected the firm's website and staff email accounts.
SOCAR Energoresource
May 14, 2022
•[ leak, energy ]
In name of #OpRussia the Anonymous collective leaks a 130 GB archive that contains nearly 116,500 emails from SOCAR Energoresource.
Elektrocentromontazh (ECM)
April 27, 2022
•[ leak, energy ]
In name of #OpRussia, the Anonymous collective leals 1.23 million emails (1.7 TB of data) from Elektrocentromontazh (ECM), the primary power organization of Russia.
Junta Administrativa del Servicio Electrico de Cartago (JASEC)
April 24, 2022
•[ ransomware, malware, energy ]
The Conti ransomware gang cripples the systems of the Junta Administrativa del Servicio Electrico de Cartago (JASEC).
Neocom Geoservice
April 19, 2022
•[ leak, energy ]
In name of #OpRussia, the Anonymous leak 87,500 emails (107GB) from Neocom Geoservice, an engineering firm specializing in exploring oil and gas fields and providing drilling support.
Devon Energy Corporation
April 16, 2022
•[ hack, ddos, energy ]
Killnet claims to have conducted a DDoS attack against the website of one of North America's leading oil and gas producers as part of a larger campaign against countries supporting Ukraine.
Technotec
April 14, 2022
•[ leak, energy ]
In name of #OpRussia, the Anonymous collective leaks 495,000 new emails (440GB) from the Russian firm Technotec, which provides oil and gas field services to companies including Rosneft and Gazprom Neft.
Aerogas
April 8, 2022
•[ leak, energy ]
The Anonymous collective leaks 100,000 emails inside 145 GB of data from Aerogas.
Forest
April 8, 2022
•[ leak, energy ]
The Anonymous collective leaks 100,000 emails inside 145 GB of data from Forest.
Large Ukrainian energy provider
April 8, 2022
•[ hack, malware, energy ]
Researchers from ESET and the Computer Emergency Team of Ukraine (CERT-UA) reveal that the Russian state-sponsored hacking Sandworm, tried to to take down a large Ukrainian energy provider via a new wiper malware called Industroyer2.
Oil, gas, mining and construction company in South America
April 7, 2022
•[ ransomware, malware, energy ]
Researchers from Kaspersky provide an analysis of a BlackCat ransomware attack targeting an undisclosed oil, gas, mining and construction company in South America via a data exfiltration tool called Fendr and ExMatter.
Gazprom Neft
April 6, 2022
•[ hack, energy ]
The website of a Russian oil producer went down after an apparent hack. The website briefly showed a statement purporting to be from the company's executive director, a close friend of the President of the Russian Federation.
Rosneft Deutschland
March 12, 2022
•[ hack, malware, energy ]
The German Federal Office for Information Security (BSI) confirms that the local subsidiary of the Russian energy giant Rosneft has been hit by a cyberattack, after the Anonymous collective claims to have stolen 20 terabytes of data.
Rompetrol
March 7, 2022
•[ ransomware, malware, energy ]
Romania's Rompetrol gas station network is hit by a Hive ransomware attack.
Unnamed engineering company with energy and military customers
February 28, 2022
•[ espionage, malware, energy ]
Researchers from Symantec/Broadcom reveal that an unnamed engineering company with energy and military customers was recently the target of the North Korean group Stonefly.
Undetermined
February 1, 2022
•[ espionage, phishing, energy ]
Spear phishing email was sent to an employee of a Ukrainian energy organization containing malicious files that would download and install a payload known as SaintBot (a downloader) and OutSteel (a document stealer). The same threat actor group targeted a Western government entity in Ukraine, as well as several Ukrainian government organizations back in March 2021.
Sea-Invest
January 30, 2022
•[ ransomware, malware, energy ]
Belgian oil transporter, Sea-Invest, is hit with a ransomware attack crippling its operations.
Evos
January 30, 2022
•[ hack, malware, energy ]
Oil terminal in the Netherlands is hit with a cyberattack causing significant operations interruptions.
