PetroVietnam Technical Services Corporation

In 2022, PetroVietnam Technical Services Corporation (PTSC), a critical entity in Vietnam’s oil and gas sector, fell victim to a ransomware attack orchestrated by the Karakurt group, a cybercriminal syndicate linked to Russian actors. The attack exploited vulnerabilities in PTSC’s network infrastructure, severely disrupting its oilfield services and offshore engineering operations. As a key service provider in Vietnam’s energy industry, PTSC’s compromise posed risks to the nation’s oil and gas production, supply chain integrity, and economic stability. The incident highlighted the vulnerability of vital industrial systems to cyber threats, with potential cascading effects on energy security. While the exact scale of data exfiltration or operational downtime was not fully disclosed, the attack’s targeting of a strategic national asset underscored its high-stakes nature, aligning with broader trends of cybercriminals leveraging ransomware to cripple critical infrastructure for financial and geopolitical gain.

Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-152a

TPRM report: https://www.rankiteo.com/company/ptsc

"id": "pts956092225",
"linkid": "ptsc",
"type": "Ransomware",
"date": "6/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'oil and gas',
                        'location': 'Vietnam',
                        'name': 'PetroVietnam Technical Services Corporation '
                                '(PTSC)',
                        'type': 'corporation'}],
 'date_publicly_disclosed': '2022',
 'description': 'In 2022, the PetroVietnam Technical Services Corporation '
                "(PTSC), a key entity in Vietnam's oil and gas sector, was "
                'targeted by a ransomware attack executed by the Karakurt '
                'group, linked to Russian cybercriminals. The attack exploited '
                'network vulnerabilities, disrupting oilfield services and '
                'offshore engineering projects.',
 'impact': {'operational_impact': 'disruption to oilfield services and '
                                  'offshore engineering projects',
            'systems_affected': ['oilfield services',
                                 'offshore engineering projects']},
 'ransomware': {'ransomware_strain': 'Karakurt'},
 'threat_actor': 'Karakurt (associated with Russian cybercriminals)',
 'title': 'Ransomware Attack on PetroVietnam Technical Services Corporation by '
          'Karakurt',
 'type': 'ransomware',
 'vulnerability_exploited': 'network vulnerabilities'}