Oil India cyber attack: Russian malware planted from Nigeria

The cyber-attack of Ransom that occurred on public sector oil company, Oil India Limited (OIL) was carried by a Russian malware planted from a server in Nigeria.

A senior police official said that it was a Russian malware planted from a server in Nigeria.

Oil stated due to the attack it has suffered no financial losses and it's operation is running smoothly.

Oil has lodged an FIR in Duliajan police station. Cyber attacker has demanded US$ 7500000 as a ransom through a note from the infected PC. Oil is roping in international cyber security expert as a consultant.

Police stated, "with due respect, it is informed that we have received an email on 12.04.2022 from Keshab Bora DGM-IT of IT Department stating that on 10.04.2022 a cyber attack of Ransom ware has been occurred on OlL's one of the work station of G&R department. After their preliminary investigation, it came to their notice that OlL's network, server and clients PCs are facing network outage".

The FIR stated, "Further, it also came to their notice that, cyber attacker has demanded 7500000 USD as a ransom through a note from the infected PC. Details of the note and email copy has been enclosed for ready references.

Presently, OIL server, network and other related services are affected. It is evident that OlL is a Public Sector Undertaking Company and due to this cyber attack - ransomware, OIL and Govt. exchequer has incurred huge financial loss as business through IT has been seriously affected. Hence, it is requested to kindly lodge FIR & take appropriate actions as per law in place."

OIL spokesperson Tridiv Hazarika told ET, "data is secured, as per protocol, we disabled our systems. Infected computers are being checked. Our SAP is running and hence operations are going on smoothly. "

He added, "our IT department will restore computers phase wise. Computers are put out of lan (local area network). Our drilling activities are going on without interruption. "