{"id":2204,"date":"2022-08-10T06:40:30","date_gmt":"2022-08-10T13:40:30","guid":{"rendered":"https:\/\/www.ssls.com\/blog\/?p=2204"},"modified":"2022-08-10T06:40:31","modified_gmt":"2022-08-10T13:40:31","slug":"blackcat-ransomware-group-attacks-european-energy-supplier","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/","title":{"rendered":"BlackCat ransomware group attacks European energy&nbsp;supplier"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png\" alt=\"\" class=\"wp-image-2026\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The group behind BlackCat ransomware has since claimed responsibility for the attack, threatening to publish some 150GB of data it stole during the breach if Encevo Group does not meet its demands.&nbsp;<\/p>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On July 25, 2022, <a href=\"https:\/\/www.encevo.eu\/en\/encevo-cyberattack\/\">Encevo Group announced <\/a>that several of its entities had been subject to a cyber attack on July 22. These entities were Creos, an electricity network and gas pipeline operator, and Enovos, an energy supplier. During the attack, hackers had stolen data and rendered some computer systems inaccessible. <a href=\"https:\/\/techmonitor.ai\/technology\/cybersecurity\/encevo-group-cyberattack-luxembourg-blackcat-ransomware\">According to Tech Monitor<\/a>, the stolen data includes contracts, agreements, passports, bills, and emails.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Fortunately, the energy supply has not been disrupted. However, many customers cannot access their online portals. Encevo has not yet been able to contact each customer affected personally as its investigation is still underway but has advised everyone to change the login credentials they use to interact with Encevo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What is BlackCat?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The group behind BlackCat, also known as AlphV, is believed to be a rebrand of the now disbanded <a href=\"https:\/\/www.ssls.com\/blog\/the-ransomware-group-behind-the-colonial-pipeline-attack\/\">DarkSide<\/a>, the ransomware group responsible for the Colonial Pipeline attack last year. The ransomware itself is highly customizable and is believed to be one of the first ransomware coded in the Rust programming language. Rust is known for its performance and safety and can work across platforms, so both Linux and Windows variants can be developed.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/blog.emsisoft.com\/en\/40931\/ransomware-profile-alphv\/\">According to Emsisoft<\/a>, it works by encrypting data using AES encryption and only decrypts stolen data if a demanded ransom is paid. The group threatens to leak the data if victims do not pay the ransom. It uses a ransomware-as-a-service (RaaS) business model, leasing it to affiliates who earn a percentage of a successful attack\u2019s ransom payment. It\u2019s also one of the few RaaS groups that can successfully threaten DDoS victims to pay a ransom.&nbsp;<br><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The attack on Encevo is just one of a long line of recent attacks carried out by BlackCat since the ransomware\u2019s first detection in November 2021. Emisoft estimates that BlackCat has been behind around 776 attacks since then. Over the past few months, the ransomware has been used to attack the likes of the video game company Bandai Namco and SRM Technologies, an Indian IT services company.&nbsp;<br><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Where to go from here<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">So, how can large organizations protect themselves against sophisticated ransomware like BlackCat? <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/06\/13\/the-many-lives-of-blackcat-ransomware\/\">Microsoft has written an in-depth blog on the subject<\/a>, suggesting companies must focus on preventing the end-to-end attack chain instead of the traditional approach of just focusing on detecting ransomware payloads. Apart from that, hardening networks through things like proper patch management and implementing credential hygiene is a must. \n\n<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The group behind BlackCat ransomware has since claimed responsibility for the attack, threatening to publish some 150GB of data it stole during the breach if Encevo Group does not meet its [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2204","post","type-post","status-publish","format-standard","hentry","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>BlackCat ransomware group attacks European energy supplier | SSLs.com Blog<\/title>\n<meta name=\"description\" content=\"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"BlackCat ransomware group attacks European energy supplier | SSLs.com Blog\" \/>\n<meta property=\"og:description\" content=\"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/\" \/>\n<meta property=\"og:site_name\" content=\"SSLs.com Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-10T13:40:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-08-10T13:40:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png\" \/>\n<meta name=\"author\" content=\"Aideen Molloy\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aideen Molloy\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/\"},\"author\":{\"name\":\"Aideen Molloy\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"headline\":\"BlackCat ransomware group attacks European energy&nbsp;supplier\",\"datePublished\":\"2022-08-10T13:40:30+00:00\",\"dateModified\":\"2022-08-10T13:40:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/\"},\"wordCount\":467,\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_BlackCat.png\",\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/\",\"name\":\"BlackCat ransomware group attacks European energy supplier | SSLs.com Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_BlackCat.png\",\"datePublished\":\"2022-08-10T13:40:30+00:00\",\"dateModified\":\"2022-08-10T13:40:31+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"description\":\"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_BlackCat.png\",\"contentUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_BlackCat.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/blackcat-ransomware-group-attacks-european-energy-supplier\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"BlackCat ransomware group attacks European energy&nbsp;supplier\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\",\"name\":\"SSLs.com Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\",\"name\":\"Aideen Molloy\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"caption\":\"Aideen Molloy\"},\"description\":\"Aideen is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.\",\"sameAs\":[\"https:\\\/\\\/www.ssls.com\\\/\"],\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/author\\\/cora-quigley\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"BlackCat ransomware group attacks European energy supplier | SSLs.com Blog","description":"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/","og_locale":"en_US","og_type":"article","og_title":"BlackCat ransomware group attacks European energy supplier | SSLs.com Blog","og_description":"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The","og_url":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/","og_site_name":"SSLs.com Blog","article_published_time":"2022-08-10T13:40:30+00:00","article_modified_time":"2022-08-10T13:40:31+00:00","og_image":[{"url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png","type":"","width":"","height":""}],"author":"Aideen Molloy","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aideen Molloy","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#article","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/"},"author":{"name":"Aideen Molloy","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"headline":"BlackCat ransomware group attacks European energy&nbsp;supplier","datePublished":"2022-08-10T13:40:30+00:00","dateModified":"2022-08-10T13:40:31+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/"},"wordCount":467,"image":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png","articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/","url":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/","name":"BlackCat ransomware group attacks European energy supplier | SSLs.com Blog","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#primaryimage"},"image":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png","datePublished":"2022-08-10T13:40:30+00:00","dateModified":"2022-08-10T13:40:31+00:00","author":{"@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"description":"Encevo Group, an energy conglomerate based in Luxembourg, is still facing disruption more than two weeks after it was hit by a ransomware attack. The","breadcrumb":{"@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#primaryimage","url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png","contentUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_BlackCat.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ssls.com\/blog\/blackcat-ransomware-group-attacks-european-energy-supplier\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ssls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"BlackCat ransomware group attacks European energy&nbsp;supplier"}]},{"@type":"WebSite","@id":"https:\/\/www.ssls.com\/blog\/#website","url":"https:\/\/www.ssls.com\/blog\/","name":"SSLs.com Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ssls.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0","name":"Aideen Molloy","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","caption":"Aideen Molloy"},"description":"Aideen is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.","sameAs":["https:\/\/www.ssls.com\/"],"url":"https:\/\/www.ssls.com\/blog\/author\/cora-quigley\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/comments?post=2204"}],"version-history":[{"count":1,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2204\/revisions"}],"predecessor-version":[{"id":2207,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/2204\/revisions\/2207"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/media?parent=2204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/categories?post=2204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/tags?post=2204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}