Publicly disclosed information for this event

Summary

References

1. https://www.bleepingcomputer.com/news/security/navy-contractor-austal-usa-confirms-cyberattack-after-data-leak/
2. https://australiancybersecuritymagazine.com.au/ransomware-attack-on-australian-shipbuilder-working-for-us-navy/
3. https://australiancybersecuritymagazine.com.au/ransomware-attack-on-australian-shipbuilder-working-for-us-navy/
4. https://www.cyberdaily.au/security/9900-threat-actors-target-austal-usa-in-ransomware-attack-us-navy-data-at-risk
5. https://www.defenceconnect.com.au/naval/13260-hackers-target-austal-usa-in-ransomware-attack-us-navy-data-at-risk

• Map, understand, patch and secure your exposed assets on the Internet.
• Implement email filtering systems to detect and block phishing emails.
• Train your organisation, personnel regularly against these threats.
• Install efficient Endpoint Detection and Response (EDR) tools.
• Work with your CSIRT organization to better understand the Tactics, Techniques and Procedures used by threat actors.
• Monitor your IT and OT systems to quickly detect potential pre-ransomware activity.
• Implement an efficient offline backup policy.
• Encrypt all sensitive data to avoid further data leaks.