SPEC Engineering targeted by losttrust ransomware group

• Ransomware group: losttrust
• Country: United Arab Emirates
• Sector: Energy & Utilities
• Announcement date: September 26, 2023

Losttrust claims data breach at SPEC Engineering

The threat actor known as losttrust has claimed to have compromised data belonging to SPEC Engineering. According to an announcement made on a ransomware leak site, the group asserts that they have successfully targeted the organization and gained unauthorized access to its internal systems.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not only encrypt an organization's data to disrupt operations but also exfiltrate sensitive information prior to the encryption phase. By threatening to publish this stolen data on public platforms, the threat actors aim to coerce the victim into paying a ransom to prevent the public exposure of their proprietary or sensitive information.

Details of the alleged attack

The losttrust group announced the targeting of SPEC Engineering on September 26, 2023. The group claims to have gained access to the organization's systems and subsequently exfiltrated data. Since the date of the announcement, it has been stated that the organization's data has been hosted on the threat actor's leak site.

Despite the claim of a successful exfiltration, the group has not provided specific details regarding the scope of the breach. No screenshots or detailed information regarding the nature of the allegedly leaked data have been provided. Additionally, there is no information available regarding the total size of the data, the specific file count, or the ransom demand requested by the group.

About SPEC Engineering

SPEC Engineering is an international company providing turnkey EPC (Engineering, Procurement, and Construction) solutions for the oil, gas, new energies, and petrochemical industries. Operating for over two decades, the firm delivers comprehensive engineering services from the conceptual stage to commissioning in challenging terrains worldwide.

Potential risks and industry implications

This incident may present a risk of exposure for the organization's operational data and customer information. If the breach is verified, sensitive project details within the energy and petrochemical sectors could potentially be accessed by unauthorized third parties. Furthermore, the exposure of employee and business partner information might lead to targeted phishing attacks or identity theft attempts.

Public information regarding the losttrust group is limited; therefore, the group's methods and motivations remain uncertain. When organizations in critical sectors like energy and utilities face such threats, the potential impact can extend beyond immediate data loss to broader operational and reputational risks. Organizations facing similar threats often need to engage with relevant regulatory bodies regarding data breach notification requirements.

To defend against such threats, organizations typically implement multi-layered security strategies. This includes robust access controls, regular security awareness training to prevent phishing, and comprehensive monitoring of network traffic to detect unauthorized data movement. Maintaining offline, immutable backups is also a fundamental defensive step to ensure business continuity in the event of a ransomware deployment.