Tankerska Plovidbas Data Breach via ElDorado Ransomware

Summary:

The ElDorado ransomware group targeted Tankerska Plovidba, a Croatian shipping company, exfiltrating 1.7TB of data. The June 2024 attack highlights the group's use of double-extortion tactics, where they encrypt and steal data, threatening to release it unless a ransom is paid. ElDorado is known for exploiting vulnerabilities like phishing and RDP misconfigurations, and has impacted multiple organizations since its emergence in 2024.

Reference URL

https://www.halcyon.ai/attacks/eldorado-ransomware-attack-exposes-tankerska-plovidbas-data
https://25011010.fs1.hubspotusercontent-eu1.net/hubfs/25011010/Norma%20Cyber%20Annual%20Threat%20Assessment.pdf