Multi-variant ransomware enables new data destruction tactics.

Digital Transformation In Packaged Goods Manufacturing

October 18, 2023

 

There have been multiple headline-making cyberattacks over the past few months, one of which is the Clorox breach in August that caused a large-scale disruption of its operations, including processing delays and product outages. The bleach maker did its best to clean house as quickly as possible—noting automated order processing was back on track as of September 25, 2023. But there were financial ramifications. On October 4, Clorox announced its quarterly sales and profit took a hit, reporting net sales are expected to decrease by 28% from the year-ago quarter. On the heels of this and several other high profile data breaches, the FBI released a private industry notification warning organizations of a new kind of attack that releases multiple ransomware variants on the same victim within 48 hours of each other. This is just another reminder that cybersecurity remains a top priority for IT and OT teams—who need to work together to safeguard all operations during the digital journey. 

Stephanie Neil| Chief Editor, CPG Next

What you’ll learn from this edition of CPG Next:

Speaking of empowering people to work together toward transformation, check out how Hexagon is helping manufacturers streamline digital workflows to improve overall productivity.

 

Presented by Hexagon

Webinar: From manual to digital: supercharge your operational workflows with Nexus Connected Worker.

For CPGs to stay ahead, you need technologies that empower transformation without disruption. Join Hexagon’s webinar on Nexus Connected Worker, game-changing digital solutions designed to streamline business processes and accelerate digital transformation. Learn how you can drive improvements in OEE, quality and productivity.

REGISTER TODAY
 
Cybersecurity
FBI Warning! Alarming New Ransomware Trend
Threat actors target victims with dual ransomware attacks.
Getty Images Ransomware

Clorox is not disclosing the details related to its cyberattack in August that forced the company to shut down automated systems and move to manual processes—wreaking havoc on its supply chain and quarterly financials. But let this be a reminder to every CPG: You could be next. And the stakes are getting higher as ransomware groups turn to new tactics that deliver a one-two punch.

According to the Federal Bureau of Investigation (FBI), two trends have emerged that include multiple ransomware attacks on the same organization in close date proximity—typically within 48 hours—and with new data destruction tactics.

First observed in July 2023, the FBI noted that during these attacks, cyber threat actors deployed two different ransomware variants in various combinations against victim companies from the following variants: AvosLocker, Diamond, Hive, Karakurt, LockBit, Quantum, and Royal. “This use of dual ransomware variants resulted in a combination of data encryption, exfiltration, and financial losses from ransom payments. Second ransomware attacks against an already compromised system could significantly harm victim entities,” the agency said.

In addition, it could be difficult to detect. According to the FBI: “In early 2022, multiple ransomware groups increased use of custom data theft, wiper tools, and malware to pressure victims to negotiate. In some cases, new code was added to known data theft tools to prevent detection. In other cases in 2022, malware containing data wipers remained dormant until a set time, then executed to corrupt data in alternating intervals.”

The FBI describes this new threat in a private industry notification that it released at the end of September. In that document, there is a large list of recommendations to help companies reduce the risk associated with a ransomware attack. Steps to protect the controls architecture specifically include: Network segmentation; network monitoring tools; update and enable real time detection on antivirus software; secure and closely monitor remote desktop protocol (RDP) use. 

Read the rest of this story on CPGNext.com

 
Virtual/Augmented Reality
There are No Couch Potatoes in the Metaverse

Imagine a world where cartoon potatoes willingly subject themselves to peeling, slicing, and processing—turning into a tater tot right before your eyes. That was a world ProFood World Editor-in-Chief Aaron Hand entered into when he put on a virtual reality headset during a booth visit with tna solutions at PACK EXPO Las Vegas last month.

It was an entertaining glimpse into how extended reality (XR) can change the way production environments are approached by allowing manufacturers to immerse themselves into a future version of the factory. It can be used for planning out a new production line, for example, and is especially helpful in brownfield projects where existing equipment is in the plant already and they need to figure out how the operators will move around when new machines are added.

“The biggest benefit is accessibility of the equipment and potential collisions with existing equipment. That’s what I see customers mostly focused on,” noted tna solutions chief sales officer Eric Geling.

Read the rest of this story on CPGNext.com
 

 

What we're reading
Packaging World:
Kraft Heinz Recalls Kraft Cheese Singles
IEEE Spectrum:
How Disney Packed Big Emotion Into a Little Robot
CPG Next:
CPGs Seek Digital Transformation Direction

Community Quiz

How would you define your digital transformation journey?

Thanks for reading CPG Next.

Please share with anyone who might find it valuable.

end