Norwegian firm shows how ransomware attack should be handled

[mood]

Norwegian firm shows how ransomware attack should be handled

Image by Gerd Altmann from Pixabay

 

ANALYSIS Norwegian firm Volue Technology has demonstrated to the rest of the world how a ransomware attack should be handled after it was hit by the Windows Ryuk strain on 5 May.

The company has set up a Web page with information about the attack and also links to frequent updates about the status of its systems.

 

There was no obfuscation about the attack, none at all. The company said: "The ransomware attack on Volue Technology ('Powel') was caused by Ryuk, a type of malware usually known for targeting large, public-entity Microsoft Windows systems."

 

Really well done crisis communication from a company hit by Ryuk ransomware. Respect. https://t.co/1dpFoFOIOw

— @mikko (@mikko) May 10, 2021

 

What is even more remarkable about this page is that it has provided the telephone number and email address of its chief executive, Trond Straume, and asked for anyone who needs additional information to contact him. Not some underling.

 

The company, which has offices all over Europe, says it "is a leading supplier of technology and enabler of the green transition".

 

After the initial announcement, Volue has issued regular updates, with no jargon and providing as much detail as can be released, without harming the recovery process.

"The ransomware attack employed encryption to some of Volue Technology’s files, databases and applications. We were able to identify the threat and have stopped the spreading across networks for now," the company has said.

"The attack impacted some of our front-end customer platforms. All systems impacted by the ransomware attack have been actively shut off for further security assessments."

 

The last time any company was so open about a ransomware attack it was again a Norwegian company, Norsk Hydro, which was hit by another Windows ransomware strain, LockerGoga, in March 2019.

The last reports from Norsk Hydro said it was slowly recovering from the attack.

 

Apart from what news of what it is doing to rectify the situation, Volue has provided links to information about the Ryuk ransomware and statistics about the attacks carried out by this strain.

 

Regular webcasts are being held, in Norwegian and English, to keep the media and any others who are interested up-to-date on the incident.

 

 

Source: Norwegian firm shows how ransomware attack should be handled