K-Electric

K-Electric, the sole electricity provider for Karachi, Pakistan, has suffered a Netwalker ransomware attack that led to the disruption of billing and online services.

K-Electric customers have been unable to access the online services for their accounts after the attack.

To resolve this issue, K-Electric appears to be trying to reroute users through a staging site but is currently having difficulties.

The ransomware operators demanded a $3,850,000 ransom payment and If a ransom is not paid within seven days, the ransom would be increased to $7.7 million.

K-Electric states that their initial investigations show that no data was stolen, but that they continue to work with local law enforcement and IT security experts.

Source: https://www.bleepingcomputer.com/news/security/netwalker-ransomware-hits-pakistans-largest-private-power-utility/

TPRM report: https://scoringcyber.rankiteo.com/company/kelectricpk

"id": "kel43619623",
"linkid": "kelectricpk",
"type": "Ransomware",
"date": "09/2020",
"severity": "75",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Energy',
                        'location': 'Karachi, Pakistan',
                        'name': 'K-Electric',
                        'type': 'Electricity Provider'}],
 'attack_vector': 'Netwalker ransomware',
 'description': 'K-Electric, the sole electricity provider for Karachi, '
                'Pakistan, has suffered a Netwalker ransomware attack that led '
                'to the disruption of billing and online services. Customers '
                'have been unable to access the online services for their '
                'accounts after the attack. K-Electric appears to be trying to '
                'reroute users through a staging site but is currently having '
                'difficulties. The ransomware operators demanded a $3,850,000 '
                'ransom payment and if a ransom is not paid within seven days, '
                'the ransom would be increased to $7.7 million. K-Electric '
                'states that their initial investigations show that no data '
                'was stolen, but that they continue to work with local law '
                'enforcement and IT security experts.',
 'impact': {'data_compromised': ['None'],
            'downtime': ['Unknown duration'],
            'operational_impact': ['Disruption of online services'],
            'systems_affected': ['Billing and online services']},
 'investigation_status': ['Ongoing'],
 'motivation': 'Financial',
 'ransomware': {'ransom_demanded': ['$3,850,000'],
                'ransomware_strain': 'Netwalker'},
 'response': {'law_enforcement_notified': ['Local law enforcement'],
              'third_party_assistance': ['IT security experts']},
 'title': 'K-Electric Ransomware Attack',
 'type': 'Ransomware'}