Ransomware Attacks On Agricultural Cooperatives: FBI Warning And PIN For Sector Protection.pdf

Ransomware Threats Targeting Agricultural Cooperatives

Issue: The FBI warns of an increased risk of ransomware attacks on agricultural cooperatives during critical planting and harvest seasons. These cyberattacks can disrupt operations, cause financial losses, and impact the food supply chain.

Timeline & Incidents:

2021 Fall Harvest: Six grain cooperatives experienced ransomware attacks using variants like Conti, BlackMatter, Suncrypt, Sodinokibi, and BlackByte. Some had to halt production entirely.
Early 2022: Two attacks were thwarted on companies providing feed milling and logistical services crucial for planting season.
March 2022: A multi-state grain company fell victim to Lockbit 2.0 ransomware, impacting its grain processing, seed, fertilizer, and logistics operations.

Threat Actors & Motivations:

Cybercriminals target cooperatives due to their time-sensitive roles in agriculture and perceived willingness to pay ransoms. Sophisticated ransomware tactics are evolving globally, with a notable rise in attacks against critical infrastructure sectors, including food and agriculture.

Recommendations:

To mitigate risks:

Back up data regularly, air gap backups, and password protect them offline.
Implement network segmentation to limit access and contain potential breaches.
Install updates/patches for operating systems, software, and firmware promptly.
Use strong passwords and multi-factor authentication whenever possible.
Enable security controls like disabling unused ports, requiring administrator credentials for software installation, and configuring least privilege access.
Train employees on cybersecurity best practices and emerging threats like ransomware and phishing scams.

Additional Resources:

Stopransomware.gov: Provides ransomware resources and alerts.
CISA's Ransomware Readiness Assessment (RRA): A self-assessment to evaluate ransomware preparedness.
CISA's Cyber Hygiene Services: No-cost services to help organizations identify and reduce cyber risks.