It has been reported that two companies based in Luxembourg are grappling with an alleged ransomware attack that began last week, the latest in a string of incidents involving European energy companies. Encevo Group said its Luxembourg entities Creos – an energy network operator – and the supplier Enovos were “victims of a cyberattack on the night of July 22.”The company said the attack took down customer portals for both companies but did not affect the supply of electricity and gas.
Full story can be found here: https://therecord.media/luxembourg-energy-companies-struggling-with-alleged-ransomware-attack-data-breach/
The cyber attacks against energy and defense organisations is among the many reminders that the physical and cyber realm are no separate and that attacks against such critical organisations can be extremely detrimental to countries and governments.
Its important to bear in mind how criminals gain access. In many cases it is through a handful of methods such as spear phishing, expoiting weak credentials or vulnerabilities in software.
Beyond that, its essential that organisations have robust threat detection and response capabilities in place. So that any breach or exfiltration of data can be quickly identified and stopped.