Last Updated on September 13, 2021 by Calvin C.
In a latest development, Olympus has been hit by Blackmatter ransomware. This tech giant, Olympus, is a leading manufacturer of optical and digital precision technology for medical systems.
The attack most likely took place on 8 September 2021 and affected limited areas of its EMEA (Europe, Middle East, Africa) IT systems.
A statement was issued out on its website as follows:
“Upon detection of suspicious activity, we immediately mobilized a specialized response team including forensics experts, and we are currently working with the highest priority to resolve this issue. As part of the investigation, we have suspended data transfers in the affected systems and have informed the relevant external partners.
We are currently working to determine the extent of the issue and will continue to provide updates as new information becomes available. We apologize for any inconvenience this has caused.”
Highly observant cybersecurity specialists have noted that Blackmatter is most likely a rebranded Darkside gang. If you remember well, the Darkside gang is responsible for the Collonial Pipeline attack in early May 2021.
The CTO at Emisoft, Fabian Wosar, wrote on his Twitter page:
“After looking into a leaked BlackMatter decryptor binary I am convinced that we are dealing with a Darkside rebrand here. Crypto routines are an exact copy pretty much for both their RSA and Salsa20 implementation including their usage of a custom matrix.”
What is a ransomware attack?
This is a type of malware where the victim’s files are encrypted or the attacker infiltrates and threatens to expose sensitive data, until a ransom is paid.
After the ransom is paid, the attacker restores access, usually by providing decryption instructions.
According to statistics reported by Purplesec, the average ransomware payment increased by 82% in 2021 to $570,000 if we look at year over year payments.
In addition, ransomware attacks have become a popular form of attack by cybercriminals as the payments are huge.
Projections show that the trend of ransomware attacks is likely to increase, something that 81% of cybersecurity experts believe.
The modus operandi used by ransomware gangs like Blackmatter is file encryption of stolen files. The attackers threaten to publish the data online if there is no ransom payment.
It is not yet clear whether Olympus will pay the ransom or not. Make sure you subscribe to our newsletter to stay up-to-date. Share the article on social media to spread the news to others.