EVRAZ operations in North America disrupted by Ryuk ransomware

Computer systems at EVRAZ, a multinational vertically integrated steel making and mining company, have been hit by Ryuk ransomware.

EVRAZ is one of the world’s largest multinational vertically integrated steel making and mining companies with headquarters in London. The company operates mainly in Russia, but also in Ukraine, Kazakhstan, Italy, Czech Republic, the United States, Canada, and South Africa.

According to ZDnet, the systems at the company have been infected with a strain of the Ryuk ransomware. EVRAZ is owned by the popular Russian oligarch Roman Abramovich, it employs more than 1,400 people in the United States and 1,800 in Canada.

According to the company, the infection paralyzed the North American branches of the company, primarily affecting steel production plants across Canada and the US.

In most of the plants, manufacturing operations were shut down at most plants.

“Manufacturing has been halted at most plants, our source told us, and the company’s IT staff is working to contain the infection and prevent it from spreading.” reported ZDNet.

Unfortunately, the list of the victims of the Ryuk ransomware is very long and includes the US government contractor Electronic Warfare Associates (EWA), US railroad company Railworks, Croatian petrol station chain INA Group, and parts manufacturer Visser Precision.

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, EVRAZ)

[adrotate banner=”5″]

[adrotate banner=”13″]