The Olympus camera giant said yesterday that it was investigating a possible cyber security incident affecting its European computer network, as well as the Middle East and Africa.
According to the announcement of the company Olympus, once they detected the suspicious activity, they mobilized their cybersecurity team and are working to resolve the issue. In the framework of researchs, report that they have suspended data transfer to the affected systems and have informed the relevant external partners.
However, information from a person inside the company with knowledge of the incident says that Olympus is "recovering" from a ransomware attack that began in the early hours of September 8. He goes on to say that there is a note for ransom left by the criminals on the infected computers, which appears to be from the BlackMatter ransomware group.
The ransom note also includes a web address on a site accessible only through the Tor Browser, known to be used by the BlackMatter team to communicate with its victims.
Η BlackMatter is a ransomware-as-a service group, which was founded as the successor to several ransomware groups, including DarkSide, which recently ceased operations after high profile ransomware attack on Colonial Pipeline, as well as REvil, which has been silent for months after the Kaseya attack that flooded hundreds of companies with ransomware. And the two attacks they attracted the attention of the American government, which promised to take action, so that no critical infrastructure is hit again.
Groups like BlackMatter operate as ransomware-as-a-service, that is, they rent access to their infrastructure, which other groups use to launch attacks, while BlackMatter receives whatever ransom is paid.
The usual tactic of BlackMatter, as well as other ransomware groups, is to steal data from a company's network before encrypting it and later threatening to publish the files on the Internet if the decryption ransom is not paid.
Japan-based Olympus now manufactures optical and digital reproduction technology for the medical industry. Until recently, the company manufactured digital cameras and other electronics, until it sold the camera piece in January 2021.