The notorious BlackCat ransomware group has targeted the Ho Chi Minh City Power company, a crucial subsidiary of Vietnam Electricity (EVN). Based on reports, the ransomware attack could have significant implications for the country since it could result in a large-scale data breach.
EVN, established in 1994 as a government-owned entity, has a pivotal position in Vietnam as it is one of the country’s most prominent power-providing companies. Operating as a one-member limited liability company since 2010, EVN runs an extensive infrastructure, including large-scale hydropower and coal-fired power plants, contributing over 50% of the national power generation system. In addition, EVN supervises power generation and transmission and regional power distribution corporations.
The BlackCat ransomware group threatens Ho Chi Minh City Power.
The alleged EVN Ho Chi Minh City Power data breach has triggered alarms nationwide, leading to the hacker group ALPHV threatening to report the incident to the Vietnam Department of Energy. The situation is rapidly developing, with 84 samples from the Vietnam Electricity data breach already published on the dark web.
However, despite the severity of the claims, Vietnam Electricity’s website remains operational, displaying no immediate signs of the alleged cyber-attack. Still, the company has yet to disclose an official response addressing the hack’s concerns, leaving stakeholders and the public anxious about the attack’s impact.
This incident is not the first time the BlackCat ransomware group has attacked a critical entity this year. The group are also the culprit of the QSI Banking earlier this year, where they stole 5TB of SQL data. While the firm did not officially confirm the QSI Banking incident, researchers assumed its existence based on dark web announcements.
As of now, the cybersecurity community and stakeholders are closely monitoring developments in Ho Chi Minh City Power. Everyone is hoping for a swift resolution to mitigate the potential effects of this latest cyber threat.
The consequences of a successful attack on Vietnam Electricity could extend beyond the immediate breach since it will affect the security and stability of the nation’s power infrastructure. This incident is a reminder of the threat posed by these cyber attacks on critical infrastructure.
Organisations and governments should improve cybersecurity to protect their infrastructure against such campaigns.
