ALPHV/BlackCat ransomware group has alleged the KHS&S cyberattack on its dark web channel. The threat actor claimed the cyberattack on February 21, 2024 and shared a deadline of 3 days from the day of posting about the organization.
KHS&S Contractors, a prominent company in the construction industry based in the USA, is allegedly facing this ransomware group which claims access to an undisclosed amount of data.
The message posted by the ALPHV/BlackCat ransomware group, directed squarely at KHS&S, was short but foreboding: “KHS&S CONTRACTORS (You have 3 days).
With revenue amounting to $49.9 million, KHS&S Contractors found itself thrust into the crosshairs of cybercriminals, the extent of the damage yet to be fully comprehended.
Alleged KHS&S Cyberattack Claims on Dark Web
To learn more about this alleged cyberattack on KHS&S, The Cyber Express promptly reached out to the organization for clarification and insights. However, at the time of writing, the organization has not shared any official statement or response to the alleged KHS&S cyberattack, leaving the claims of the cyberattack hanging in uncertainty.
Despite the lack of official acknowledgment, skepticism emerged regarding the validity of the attack. The website of KHS&S appeared operational, showing no immediate signs of disruption or compromise.
However, it has been known that cyber assailants often target backend systems and databases rather than launching frontal assaults.
Indeed, the KHS&S cyberattack, if confirmed, would be emblematic of a broader trend within the construction industry. Recent years have witnessed a surge in ransomware attacks targeting construction firms, with Nordlocker, a leading encryption software firm, ranking the sector as the most vulnerable to such incursions for two out of the past three years.
The Vulnerabilities Within Construction Companies
The vulnerabilities inherent in the construction industry serve as an irresistible victim for cybercriminals. The reliance on modern-day digital tools, from computer-aided design (CAD) to building information modeling (BIM), exposes firms to heightened risks.
Compounding the problem is the often lax cybersecurity posture of many construction companies, coupled with inadequate employee training in identifying and mitigating cyber threats.
The rise of cyberattacks on construction companies becomes evident with incidents such as the cyberattack on Simpson Manufacturing in 2023. The California-based engineering firm, renowned for its wood and concrete construction products, found itself in a cyberattack that prompted the shutdown of critical IT systems.
In an SEC filing, Simpson Manufacturing acknowledged the cybersecurity incident, revealing the disruptions to its IT infrastructure and applications. The company’s response included taking affected systems offline in a bid to contain the breach, highlighting the severity and persistence of cyber threats facing the construction sector.
Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.