{"id":51077,"date":"2021-06-14T11:13:05","date_gmt":"2021-06-14T11:13:05","guid":{"rendered":"https:\/\/timestampmag.com\/?p=51077"},"modified":"2021-06-14T11:13:05","modified_gmt":"2021-06-14T11:13:05","slug":"two-separate-crypto-ransomware-attacks-on-jbs-holdings-colonial-pipeline","status":"publish","type":"post","link":"https:\/\/timestampmag.com\/2021\/06\/14\/two-separate-crypto-ransomware-attacks-on-jbs-holdings-colonial-pipeline\/","title":{"rendered":"Two Separate Crypto-Ransomware Attacks on JBS Holdings &#038; Colonial Pipeline"},"content":{"rendered":"<ul>\n<li>In the first week of June 2021, the largest meat producer in the world, JBS Holdings became a victim of a cyber attack. Criminals sneak into the company\u2019s system and took it over. It led to the suspension of several meat plants in the US, Canada, and Australia.<\/li>\n<li>JBS Holdings paid a ransom of 30 Bitcoin (BTC) worth $11 million to restore its operations and avoid further damages.<\/li>\n<li>Earlier, at the end of May 2021, The Colonial Pipeline was at the receiving end of a similar cyberattack that crippled fuel supply in the southeast region of the US for days.<\/li>\n<li>The Colonial Pipeline paid $4.4 million as a ransom. Luckily, the US government task force recovered $2.3 million out of that amount from a Bitcoin wallet.<\/li>\n<\/ul>\n<h2>The Largest Meat Supplier in the World JBS Holdings Pays $11M in a Crypto Ransomware Attack<\/h2>\n<p>The largest meat supplier in the world, JBS Holdings had to shut down some of its plants in the US, Canada, and Australia, in an unprecedented ransomware attack.<\/p>\n<p>JBS paid 30 bitcoin worth $11 million to attackers to avoid further impact on its own and partners\u2019 businesses, such as restaurants, farmers, and grocery stores.<\/p>\n<figure id=\"attachment_51079\" aria-describedby=\"caption-attachment-51079\" style=\"width: 1920px\" class=\"wp-caption alignleft\"><img fetchpriority=\"high\" decoding=\"async\" class=\"size-full wp-image-51079\" src=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920.jpg\" alt=\"\" width=\"1920\" height=\"1280\" srcset=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920.jpg 1920w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920-300x200.jpg 300w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920-1024x683.jpg 1024w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920-768x512.jpg 768w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/binary-2170630_1920-1536x1024.jpg 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><figcaption id=\"caption-attachment-51079\" class=\"wp-caption-text\">Source: <a href=\"https:\/\/pixabay.com\/illustrations\/binary-black-cyber-data-digits-2170630\/\" target=\"_blank\" rel=\"noopener\">Pixabay.com<\/a><\/figcaption><\/figure>\n<p><a href=\"https:\/\/www.coindesk.com\/ransomware-jbs-holdings-meat-producer\" target=\"_blank\" rel=\"noopener\">Coindesk<\/a> reported that on June 9, 2021, JBS Holdings made the payment to a group called \u201cREvil,\u201d which did not leave any trace as to how it sneaked into the company\u2019s systems.<\/p>\n<p>The attack is similar to the ransomware attack on the Colonial Pipeline that happened on May 14. We will talk about this attack too in a later section.<\/p>\n<p>According to a report by <a href=\"https:\/\/www.reuters.com\/world\/us\/some-us-meat-plants-stop-operating-after-jbs-cyber-attack-2021-06-01\/\" target=\"_blank\" rel=\"noopener\">Reuters<\/a>, the attack may have been carried out by a criminal organization based in Russia.<\/p>\n<p>Later, JBS conducted a forensic investigation and confirmed that no data relating to customers, suppliers, or employees were breached in the attack.<\/p>\n<p>The CEO of JBS Holdings, Mr. Andre Nogueira said it was painful to pay the amount to the criminals, but it was done to protect the customers. He also said that the company paid the ransom after most of the JBS plants became functional again.<\/p>\n<p>JBS came to know about the attack on May 30 after its employees started noticing signs of irregularities on their servers. Then a message displayed demanding a ransom in bitcoin.<\/p>\n<p>After getting the message, JBS contacted the FBI right away, and the IT staff in the company started closing the supplier\u2019s systems to prevent further attacks.<\/p>\n<p>Fortunately, JBS kept secondary data backups in the encrypted form but had to pay the ransom amount to restore its operations.<\/p>\n<p>Attacks like this make it even more important to roll out stringent <a href=\"https:\/\/timestampmag.com\/privacy-protocols-security-related-projects\/\" target=\"_blank\" rel=\"noopener\">privacy protocols &amp; security-related projects<\/a>.<\/p>\n<h2>US Task Force Recovers $2.3M Crypto Ransom Taken from the Colonial Pipeline<\/h2>\n<p>The US government task force officials <a href=\"https:\/\/cointelegraph.com\/news\/us-officials-recover-2-3m-in-crypto-from-colonial-pipeline-ransom\" target=\"_blank\" rel=\"noopener\">recovered crypto worth more than $2.3 million<\/a> that was paid after a cyber attack on the Colonial Pipeline system.<\/p>\n<p>The attack on the Colonial Pipeline crippled the fuel delivery in the southeast region of the US for several days. According to the investigators, the attackers may have a link to a gang located in Russia.<\/p>\n<figure id=\"attachment_51080\" aria-describedby=\"caption-attachment-51080\" style=\"width: 1920px\" class=\"wp-caption alignleft\"><img decoding=\"async\" class=\"size-full wp-image-51080\" src=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920.jpg\" alt=\"\" width=\"1920\" height=\"1120\" srcset=\"https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920.jpg 1920w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920-300x175.jpg 300w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920-1024x597.jpg 1024w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920-768x448.jpg 768w, https:\/\/timestampmag.com\/wp-content\/uploads\/2021\/06\/cyber-security-1952020_1920-1536x896.jpg 1536w\" sizes=\"(max-width: 1920px) 100vw, 1920px\" \/><figcaption id=\"caption-attachment-51080\" class=\"wp-caption-text\">Source: <a href=\"https:\/\/pixabay.com\/illustrations\/cyber-security-internet-virus-1952020\/\" target=\"_blank\" rel=\"noopener\">Pixabay.com<\/a><\/figcaption><\/figure>\n<p>Later, Colonial Pipeline confirmed that made a payment of $4.4 million as ransom to the cyber-criminal gang that is responsible for the attack.<\/p>\n<p>During a press conference, Lisa Monaco, the Deputy Attorney General issued a statement that the government task force traced and recovered Bitcoin (BTC) worth $2.3 million from DarkSide hackers in Russia.<\/p>\n<p>Ms. Monaco also mentioned that it was the first time the government task force investigated, disrupted, and prosecuted a ransomware attack.<\/p>\n<p>Monaco said the company quickly notified authorities of the problem and ransom demand, leading to the task force\u2019s involvement.<\/p>\n<p>During the same press conference, Paul Abatte, FBI Deputy Associate Director, stated that the task force recovered the amount from a Bitcoin wallet that was used to pay the ransom in the past.<\/p>\n<p>A report by <a href=\"https:\/\/www.wsj.com\/articles\/how-the-fbi-got-colonial-pipelines-ransom-money-back-11623403981\" target=\"_blank\" rel=\"noopener\">The Wall Street Journal<\/a> says that the FBI disclosed some details on how it could recover $2.3 million from the total ransom that Colonial Pipeline paid.<\/p>\n<p>The task force used a sophisticated method to map hundreds of millions of bitcoin addresses that are linked to illegal groups around the world. Investigators traced the money from the coffer\u2019s of the pipeline operator to a Bitcoin address.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the first week of June 2021, the largest meat producer in the world, JBS Holdings became a victim of a cyber attack. Criminals sneak into the company\u2019s system and took it over. It led to the suspension of several meat plants in the US, Canada, and Australia. JBS Holdings paid a ransom of 30 [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":51078,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[30,101,622,624,370,626,625,621,620,623,419],"_links":{"self":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51077"}],"collection":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/comments?post=51077"}],"version-history":[{"count":1,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51077\/revisions"}],"predecessor-version":[{"id":51081,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/posts\/51077\/revisions\/51081"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/media\/51078"}],"wp:attachment":[{"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/media?parent=51077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/categories?post=51077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/timestampmag.com\/wp-json\/wp\/v2\/tags?post=51077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}