Maritime Computer Emergency Response Team ADMIRAL dataset ADMIRAL dataset

Publicly disclosed information for this event

Index Number:
Title:
2017_002
A port is hit by a ransomware attack leading to an interruption of its activities.
Day Month Year Country Activity Incident Type
27 June 2017 India Port Virus/Ransomware

Summary

A port is hit by a ransomware attack leading to an interruption of its activities.

Victim

N/A

Claimed/Reported Threat Actor

N/A

Origin

Cybercrime

Main impact

Availability

References

  1. https://thewire.in/economy/jnpt-indias-largest-container-port-hit-by-global-cyber-attack
  2. https://www.thehindu.com/news/national/operations-at-jawaharlal-nehru-port-in-mumbai-hit-by-ransomware/article19159064.ece
  3. https://www.hindustantimes.com/india-news/cyber-attack-malware-hits-jawaharlal-nehru-port-operations-in-mumbai/story-xGtbHwvZI4bX5RgJCUBN3L.html

Recommendations to Port to reduce Virus/Ransomware risks:

  • Map, understand, patch and secure your exposed assets on the Internet.
  • Implement email filtering systems to detect and block phishing emails.
  • Train your organisation, personnel regularly against these threats.
  • Install efficient Endpoint Detection and Response (EDR) tools.
  • Work with your CSIRT organization to better understand the Tactics, Techniques and Procedures used by threat actors.
  • Monitor your IT and OT systems to quickly detect potential pre-ransomware activity.
  • Implement an efficient offline backup policy.
  • Encrypt all sensitive data to avoid further data leaks.
Previous Next
Disclaimer: the data are provided as is. France Cyber Maritime and the M-CERT take no responsibility for the soundness, quality, precision, nor the eventual attribution made by the referenced URLs. We give a lot of respect and support to the victims of attacks.
Files generated on Thursday, 10th October 2024.
ADMIRAL is licensed under the Creative Commons CC-BY-NC license. Copyright © France Cyber Maritime 2024.