BlackBasta Ransomware Attack on ABB in Switzerland

Summary:

On May 7, 2023, Swiss multinational company ABB, a leading provider of electrification and automation technology, suffered a ransomware attack by the Black Basta gang. The attack disrupted ABB's operations, affecting its Windows Active Directory and hundreds of devices, leading to delays in projects and impacting manufacturing. In response, ABB terminated VPN connections with clients to prevent further spread. The company, headquartered in Zurich and employing around 105,000 people, serves various public and private sector clients, including US federal agencies. Black Basta, known for double-extortion tactics and linked to the FIN7 hacking group, has been active since April 2022. ABB is working to contain the incident and restore normal operations. It remains unclear if a ransom demand has been issued or paid, and no data has been found on the dark web.

Reference URL

https://techmonitor.ai/technology/cybersecurity/abb-cyberattack-black-basta
https://www.bleepingcomputer.com/news/security/multinational-tech-firm-abb-hit-by-black-basta-ransomware-attack/
https://cyberintelmag.com/attacks-data-breaches/black-basta-ransomware-outbreak-targets-international-tech-company-abb/