Olympus hit by suspected ransomware attack
The former digital camera specialist has shut down its networks in Europe, Africa and the Middle East while it investigates the incident
Japanese tech giant Olympus has shut down its computer networks in Europe, Africa and the Middle East while it investigates a cyber attack on its systems.
The firm didn't specify the type of attack, but sources told TechCrunch that Olympus was hit with ransomware in the early hours of 8 September.
Details of the incident were shared with TechCrunch prior to Olympus' acknowledgement on Sunday, with claims a ransom note had been left behind on infected computers by the ransomware group 'BlackMatter'.
"Your network is encrypted, and not currently operational," the note reads. "If you pay, we will provide you the programs for decryption."
BlackMatter is a ransomware as a service group founded as a successor to a cohort of other hacker affiliations, which potentially includes DarkSide, the group that launched the ransomware attack on the Colonial Pipeline earlier in the year. Since June, security specialist Emsisoft has recorded more than 40 separate attacks attributed to BlackMatter, but suggests that the total number of hits could be "significantly higher".
BlackMatter's note to Olympus also includes a web address to a site that is only accessible through the Tor browser which is believed to be the preferred method of communication for the group. Olympus, however, has only alluded to "suspicious activity" and that a specialised response team, including forensic experts, are investigating.
RELATED RESOURCE
The state of ransomware in retail 2021
Insights into the current state of ransomware in the retail sector
"We are currently working with the highest priority to resolve this issue," the firm said in a statement. "As part of the investigation, we have suspended data transfers in the affected systems and have informed the relevant external partners.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"We are currently working to determine the extent of the issue and will continue to provide updates as new information becomes available. We apologise for any inconvenience this has caused."
Olympus manufactures optical and digital reprography technology for medical and life science businesses but is perhaps more famous for its former speciality in digital cameras. However, the firm sold that part of its business in January due to poor sales.
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Trump's AI executive order could leave US in a 'regulatory vacuum'News Citing a "patchwork of 50 different regulatory regimes" and "ideological bias", President Trump wants rules to be set at a federal level
-
TPUs: Google's home advantageITPro Podcast How does TPU v7 stack up against Nvidia's latest chips – and can Google scale AI using only its own supply?
-
15-year-old revealed as key player in Scattered LAPSUS$ HuntersNews 'Rey' says he's trying to leave Scattered LAPSUS$ Hunters and is prepared to cooperate with law enforcement
-
The Scattered Lapsus$ Hunters group is targeting Zendesk customers – here’s what you need to knowNews The group appears to be infecting support and help-desk personnel with remote access trojans and other forms of malware
-
Impact of Asahi cyber attack laid bare as company confirms 1.5 million customers exposedNews No ransom has been paid, said president and group CEO Atsushi Katsuki, and the company is restoring its systems
-
The US, UK, and Australia just imposed sanctions on a Russian cyber crime group – 'we are exposing their dark networks and going after those responsible'News Media Land offers 'bulletproof' hosting services used for ransomware and DDoS attacks around the world
-
A notorious ransomware group is spreading fake Microsoft Teams ads to snare victimsNews The Rhysida ransomware group is leveraging Trusted Signing from Microsoft to lend plausibility to its activities
-
Volkswagen confirms security ‘incident’ amid ransomware breach claimsNews Volkswagen has confirmed a security "incident" has occurred, but insists no IT systems have been compromised.
-
The number of ransomware groups rockets as new, smaller players emergeNews The good news is that the number of victims remains steady
-
Teens arrested over nursery chain Kido hacknews The ransom attack caused widespread shock when the hackers published children's personal data
