Anubis Ransomware Attack Disrupts Adriatic Port Authority Operations

• •Anubis ransomware attacked the Adriatic Port Authority, demanding a $10 million ransom.
• •The attack began on December 11, 2025, and was confirmed by Anubis in January 2026.
• •Exploited vulnerabilities included insecure cloud accounts and spear-phishing tactics.

The Anubis ransomware group launched a cyberattack on the Adriatic Port Authority, crippling operations and causing significant disruptions in maritime logistics. The attack, attributed to Anubis in January 2026, reportedly began on December 11, 2025, and resulted in a $10 million Bitcoin ransom demand. Resecurity noted that the attack compromised 2% of the port's data, with backups preserving the majority. Stolen information included contracts, employee records, and sensitive port safety plans. The attackers gained access through a spear-phishing email targeting port management staff, exploiting IT vulnerabilities rather than operational technology. This incident highlights the growing threat to maritime infrastructure amid increasing digitalization. Resecurity predicts a rise in similar attacks through 2030 due to geopolitical tensions and the expanding attack surface in the sector.