Petrobras allegedly compromised by Everest ransomware

Cybernews reports that Petrobras, the leading Brazilian multinational oil and gas corporation, had 90 GB of data purportedly exfiltrated by the Everest ransomware operation, which threatened to expose the data trove in less than a week.

Allegedly stolen were details on the firm's research on the post-salt layer of the Campos Basin near the Atlantic Ocean, which was recently found to have high-quality oil. Aside from raw seismic navigation data, OBN node positions, and DGPS accuracy, such a data trove also contained quality control information, hydrophone and source depths, and equipment metadata, among others, according to Everest. However, the absence of real-time corporate data access has reduced the likelihood of potential cyberespionage against Petrobras.

"The impact of this leak is mostly reputational, and it could reduce competitive advantage for the company as the exposed navigation data and reports could indicate ship positioning and used equipment," said Cybernews researchers. Everest's claims come after it took responsibility for intrusions against major Italian industrial and chemical gas producer SIAD Group, aviation giant Collins Aerospace, and luxury automaker BMW.