Sep 30, 2020 17:00:00

The world's leading shipping company is hit by a cyber attack and some systems go offline

Based in France,

CMA CGM is the world's third largest shipping and container shipping company, with 110,000 employees in more than 160 countries around the world. It is reported that such CMA CGM 'blocked Internet access to some applications' after being attacked by ransomware affecting network peripherals.

cmacgm-group.com/en/news-media/important-notice-external-access-to-CMA-CGM-IT-applications
https://www.cmacgm-group.com/en/news-media/important-notice-external-access-to-CMA-CGM-IT-applications

CMA CGM confirms ransomware attack :: Lloyd's List
https://lloydslist.maritimeintelligence.informa.com/LL1134044/CMA-CGM-confirms-ransomware-attack

Logistics giant CMA CGM goes offline to block malware attack
https://www.bleepingcomputer.com/news/security/logistics-giant-cma-cgm-goes-offline-to-block-malware-attack/

Ransomware Attack on Shipping Giant --Infosecurity Magazine
https://www.infosecurity-magazine.com/news/ransomware-attack-on-shipping-giant/

According to a statement released by CMA CGM on September 28, 2020, access to applications was blocked to prevent the spread of ransomware because a ransomware attack affecting peripheral servers was detected. Due to this effect, access to CMA CGM and reservation sites of affiliated companies was temporarily lost.

'The IT team is working to resolve this issue to ensure business continuity. Please contact your local distributor for all bookings,' CMA CGM told affected customers. I am telling you on the official website.

The attack was by RagnarLocker, a data encryption ransomware, and hackers have asked CMA CGM to 'pay the ransom if you want a decryption key.' However, the exact amount requested by the hacker has not been disclosed.

RagnarLocker is the first ransomware detected in late December 2019, targeting the software of managed service providers (MSPs) that undertake system operations such as companies to prevent attacks from being detected. Is a feature.

'System visibility and cybersecurity maturity in the shipping industry are relatively low,' said Andrea Carcano , co-founder of Nozomi Networks, a provider of security services to the industrial sector. Although automation and remote monitoring are being introduced in the shipping industry, operators who use the system are vulnerable to cyber attacks because their security level is not high.

In addition, CMA CGM has succeeded in separating the ransomware by prompt response, and it is said that it is continuing to make efforts for complete system recovery.

cmacgm-group.com/en/news-media/global-it-update-09-29-2020
https://www.cmacgm-group.com/en/news-media/global-it-update-09-29-2020