Russian-Linked Cybercriminals Strike Boeing's Services Division In High-Profile Attack

Boeing Co.’s BA global services division has fallen prey to a large-scale cyberattack. The company has assured that the incident does not pose any threat to flight safety.

What Happened: As reported by Bloomberg, Boeing has acknowledged a “cyber incident” that has affected parts of its parts and distribution business. The company is currently working with law enforcement and regulatory authorities to investigate the matter.

A cybercriminal group with Russian ties, known as LockBit, reportedly threatened to release “sensitive data” if Boeing failed to pay a ransom by Nov. 2. However, as of Wednesday evening, there was no mention of Boeing on LockBit’s leak site.

See Also: Musk Offers To Solve SF Rail Extension Issue For Just 1% Of Cost

Brett Callow, a threat analyst at Emsisoft, indicated that when organizations are removed from leak sites, it usually suggests that the ransom has been paid or negotiations are in progress. A Boeing spokesperson, however, declined to comment to Bloomberg on whether any ransom was paid.

LockBit, a notorious hacking group, primarily uses ransomware to encrypt victims’ files and demands payment for their release. Boeing is now alerting its customers and suppliers about the cyberattack.

Why It Matters: In September, a report revealed that one in every six ransomware attacks on U.S. government offices were tracked back to the LockBit group, with the number of new victims increasing by 47% in the second half of last year.

According to the U.S. Justice Department, LockBit has been active since around January 2020. The gang has extorted about $100 million in ransom demands as of February this year. 

Check out more of Benzinga’s Consumer Tech coverage by following this link.

Photo by Ross Parmly on Unsplash

Read Next: ‘Uh Oh,’ Says Elon Musk On President Biden Requiring AI Companies To ‘Address Algorithmic Discrimination’