Mexico's largest oil and gas corporation has been attacked by ransomware, presenting a cyber security disaster

Pemex Oil and Gas Corporation, one of the largest government-owned oil and gas companies, has just become the victim of a serious ransomware attack, causing the company to disconnect. intranet system off the Internet and take measures to back up important data from the hard drive. All production and trading activities were delayed. The initial losses were estimated at millions of dollars.

According to reports from Reuters and Bloomberg, Pemex's key servers were simultaneously infected by Ryuk, a well-known ransomware strain, often distributed via malicious email or botnet phishing campaigns like Emotet.

'We are taking measures to resolve this cyber security disaster at the highest level. All possible alternatives against Ryuk ransomware will be applied. The problem has been severely affecting the operation of various Pemex servers, 'said a security expert with the Pemex Information Technology team.

Mexico's largest oil and gas corporation has been attacked by ransomware, presenting a cyber security disaster Picture 1

Ryuk is a complex ransomware strain that has been raining all over the world for the past 3 years. This malware was developed and operated by a cybercriminal group called Grim Spider, with the main purpose being aimed at large organizations and businesses. Ryuk has been involved in a series of scandals, even prominent cyber security disasters such as the extortion of Riviera Beach, crippling Lake City's network . Causing damage of tens of millions of dollars. .

Back to the Pemex case. In a statement released on Tuesday night, Pemex said cyber attacks were quickly disabled, along with the measures to overcome the situation being implemented effectively. Currently, the malware only affects a small number of computers in the system.

DoppelPaymer, the hacker group behind the incident, requested 565 bitcoins, or $ 4.9 million for the Pemex data they were encrypting. In that gas, the Mexican oil company has not released any comments on the actions of the attackers.

The following developments of the case will be continuously updated by us in this article, welcome to read!