Spanish Council for Scientific Research

The Spanish National Research Council (CSIC) was hit by a ransomware attack that is now attributed to Russian hackers.

No indication that the attacker stole sensitive or confidential information.

The Cybersecurity Operations Center (COCS) and the National Cryptologic Center (CCN) protocol was immediately activated after the intrusion was discovered.

In an effort to contain the attack and stop it from spreading to areas that had not been directly damaged, the agency adds that it adhered to protocol and disconnected some of its research facilities from the network.

Source: https://www.bleepingcomputer.com/news/security/spanish-research-agency-still-recovering-after-ransomware-attack/

TPRM report: https://www.rankiteo.com/company/spanish-council-for-scientific-research

"id": "spa101331122",
"linkid": "spanish-council-for-scientific-research",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Research',
                        'location': 'Spain',
                        'name': 'Spanish National Research Council (CSIC)',
                        'type': 'Government Research Institute'}],
 'description': 'The Spanish National Research Council (CSIC) was hit by a '
                'ransomware attack attributed to Russian hackers.',
 'response': {'containment_measures': ['Disconnected some research facilities '
                                       'from the network'],
              'incident_response_plan_activated': True},
 'threat_actor': 'Russian hackers',
 'title': 'CSIC Ransomware Attack',
 'type': 'Ransomware'}