Ransomware Attack on The Plastic Bag Company by Sarcoma Group

Incident Date: Oct 09, 2024

Attack Overview
VICTIM
The Plastic Bag
INDUSTRY
Manufacturing
LOCATION
Australia
ATTACKER
Sarcoma
FIRST REPORTED
October 9, 2024

Ransomware Attack on The Plastic Bag Company by Sarcoma Group

The Plastic Bag Company Pty Ltd, a prominent player in the Australian manufacturing sector, has recently fallen victim to a ransomware attack by the newly emerged cybercriminal group, Sarcoma. This incident highlights the increasing threat posed by ransomware groups targeting diverse industries.

Company Profile and Industry Standing

Located in Smithfield, New South Wales, The Plastic Bag Company specializes in the production of plastic bags and related products. The company is known for its comprehensive manufacturing process, which includes film extrusion, printing, and bag formation. This vertical integration allows for greater control over quality and supply chain efficiency, establishing the company as a key player in the Australian market. Despite its operational scale, the company’s focus on traditional manufacturing processes may have left it vulnerable to modern cyber threats.

Details of the Ransomware Attack

The attack on The Plastic Bag Company was executed by Sarcoma, a ransomware group that has quickly gained notoriety for its aggressive tactics. On October 10, Sarcoma listed the company on its dark web portal, claiming to have exfiltrated 3.6 GB of sensitive data, including tax returns and passport scans. The group has threatened to release more data within 26 days, although no specific ransom demand has been made public. This attack underscores the group's strategy of leveraging data leaks as a means of coercion.

Sarcoma Ransomware Group: Tactics and Characteristics

Sarcoma distinguishes itself by employing a double extortion strategy, which involves both encrypting data and threatening to leak it publicly. The group has targeted a wide range of industries, with a notable presence in Australia and New Zealand. Sarcoma's operations are characterized by their lack of publicly listed ransom amounts, focusing instead on exposing poor security practices among organizations. The group's darknet leak site serves as a platform to list victims and provide evidence of stolen data.

Potential Vulnerabilities and Penetration Methods

While specific details of how Sarcoma penetrated The Plastic Bag Company's systems remain unclear, common vulnerabilities in manufacturing sectors include outdated software, insufficient network segmentation, and inadequate employee training on cybersecurity practices. These factors may have contributed to the company's susceptibility to the attack, emphasizing the need for enhanced security measures in the industry.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.