<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<span style="background-color:rgb(255, 255, 255);display:inline !important">Hello,</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br>
</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)">I hope everyone is doing well!</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br>
</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)">Below is the entry for today.</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br>
</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)">09/07/2022 - Diary entry #590:</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br>
</div>
<blockquote style="background-color:rgb(255, 255, 255);margin-top:0px;margin-bottom:0px">
<div style="margin:0px">This week Lockbit added in their wall-of-shame a new entry for Eneva, a Brazilian energy company that operates in the exploration of oil, natural gas and commercialization of electric energy. In the entry, along with the countdown ending
on September 20th, they claim to have stolen more than 1TB of data, including "finance, plans for the future, legal information, accounting, marketing, insurance and much more.". Lockbit, covered in multiple of our Daily Diaries, is one of the most dangerous
ransomware families currently active. Operating in the ransomware-as-a-service model, they publish a new victim on their wall-of-shame almost every day.
<div><br>
</div>
<div>This is not the first time a Brazilian Energy company is affected by a ransomware. In mid-2020 we covered in a blog post REvil's (a.k.a. Sodinokibi) attack on Light S.A. (https://www.appgate.com/blog/electric-company-ransomware-attack-calls-for-14-million-in-ransom).
At the time, the criminals demanded a ransom payment of $14 million USD. At the beginning of 2021 both Copel and Eletrobras, two major electrical utilities companies in Brazil, were affected by Darkside, having also stolen more than 1TB of data.</div>
<div><br>
</div>
Companies in the energy sector tend to have a large infrastructure with many systems connected to the same network - it's also not uncommon that many of those are outdated, operating on legacy versions of software and operational systems. Being a sensitive
type of service, that must recover from incidents as quickly as possible at all costs, it's a full plate for ransomware attacks. Companies of this size must heavily invest in network segmentation, isolating their important assets from external access and limiting
the damage in cybersecurity incidents. Sensitive systems that must operate legacy software should be kept off the network whenever possible, avoiding any contact with unauthorized access.<br>
</div>
</blockquote>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br>
</div>
<span style="background-color:rgb(255, 255, 255);display:inline !important">Kind Regards,</span><br>
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<div></div>
<div></div>
<div></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<table style="font-family:"Times New Roman"; font-size:medium; text-align:start" id="tableSelected0">
<tbody>
<tr>
<td width="180" align="left" style="width:180px">
<table width="120" align="left">
<tbody>
<tr>
<td colspan="3" align="center"><a href="https://www.appgate.com/"><img alt="" width="120" height="30" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/logo@2x.png"></a></td>
</tr>
<tr>
<td colspan="3" align="center"> </td>
</tr>
<tr>
<td width="37%" align="center"><a href="https://www.linkedin.com/company/appgate-security/"><img width="18" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/likedin@2x.png"></a></td>
<td width="28%"><a href="https://twitter.com/AppgateSecurity"><img width="20" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/twitter@2x.png"></a></td>
<td width="35%"><a href="https://www.youtube.com/channel/UC-8GvxcZbm-R3EJNl8jYjiQ"><img width="26" height="18" alt="" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/youtube@2x.png"></a></td>
</tr>
</tbody>
</table>
<p> </p>
</td>
<td width="350" colspan="2" rowspan="2" style="width:350px">
<p style="font-family:Arial,Helvetica,sans-serif; font-size:13px; color:rgb(12,12,12)">
<strong></strong></p>
<table style="font-weight:400;font-size:medium;font-family:"Times New Roman";color:rgb(0, 0, 0);background-color:rgb(255, 255, 255)">
<tbody>
<tr>
<td colspan="2" rowspan="2" style="width:350px">
<p style="margin-top:0px;margin-bottom:0px;color:rgb(12, 12, 12) !important;font-size:13px;font-family:Arial, Helvetica, sans-serif">
<strong>MART</strong><br>
</p>
<p style="margin-top:0px;margin-bottom:0px;color:rgb(12, 12, 12) !important;font-size:13px;font-family:Arial, Helvetica, sans-serif">
Malware Analysis and Research Team<br>
</p>
<p style="margin-top:0px;margin-bottom:0px;color:rgb(12, 12, 12) !important;font-size:13px;font-family:Arial, Helvetica, sans-serif">
<strong>Appgate</strong></p>
<p style="margin-top:0px;margin-bottom:0px;color:rgb(12, 12, 12) !important;font-size:13px;font-family:Arial, Helvetica, sans-serif">
E:<span style="margin:0px"><span> </span><a href="mailto:ctas-mat@appgate.com" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" title="mailto:ctas-mat@appgate.com" data-linkindex="4" style="margin:0px"><span style="margin:0px">ctas-mat@appgate.com</span></a></span></p>
</td>
</tr>
</tbody>
</table>
<p style="font-family:Arial,Helvetica,sans-serif; font-size:13px; color:rgb(12,12,12)">
<span style="background-color:rgb(255,255,255); display:inline!important"></span></p>
</td>
</tr>
</tbody>
</table>
<br>
</div>
</div>
</div>
</div>
</body>
</html>