Ransomhouse Targets Pertamina in Latest Ransomware Attack

• •Pertamina is the latest victim of Ransomhouse, linked to the FortiBleed vulnerability.
• •CVE-2022-40684 has been actively exploited since October 2022.
• •Organizations are urged to patch FortiOS vulnerabilities to prevent similar attacks.

Ransomhouse has claimed a new victim, Pertamina, following the exposure of FortiOS SSL-VPN credentials due to the 'FortiBleed' vulnerability (CVE-2022-40684). This vulnerability was publicly disclosed on October 18, 2022, and has been actively exploited since October 11, 2022. The attack has led to the publication of DNS records associated with Pertamina, indicating a significant breach. The incident follows a similar attack on the City of Fort Smith, Arkansas, which also involved the same CVE. Both attacks highlight the ongoing threat posed by ransomware groups exploiting known vulnerabilities. As of now, the extent of data exfiltration or operational disruption at Pertamina remains unclear. The situation emphasizes the need for organizations to patch vulnerabilities promptly and monitor their systems for unusual activity.