September 1, 2022

Cl0p ransomware group accessed water supplier’s control system

The ransomware operation Cl0p appeared to have accessed the industrial control systems of a UK water supply firm.

Earlier this month, the notorious ransomware group Cl0p reported it had hacked into a water supplier and have accessed the firm’s internal network potentially giving them the ability to mess with the water flow.

As proof, the operators dumped the firm’s internal data, which included screenshots that appeared to show interfaces used to control the water supply.

Now, security researchers who specialize in industrial control systems cybersecurity (ICS) and who have analyzed the data published by Cl0p think the gang could potentially have interfered with the systems of South Staff Water (SSW), a UK water supply provider:

They appear to have had sufficient access in the environment to conduct further operations in the environment.

The hackers who are part of Cl0p said:

We do not harm people and treat critical infrastructure with respect. We didn’t really go into it because we didn’t want to harm anyone.

The other day, the world's largest distributor of books to libraries worldwide Baker & Taylor confirmed it's still working on restoring systems after being hit by ransomware more than a week ago.