Acronis, a global leader in cyber protection, warns of an attack by Snake ransomware, also known as EKANS (“Snake” spelled backwards). This ransomware is notable for targeting industrial control systems (ICS), not individual machines but entire networks. The ransomware, which first appeared in December last year, stops specific processes related to ICS operations and deletes Windows backups.
Snake enters systems through insecure RDP configurations and is distributed using spam emails and infected attachments. It can also enter a system through botnets, exploits, malicious ads, compromised websites, fake updates, or infected installation files.
No decryption tool is currently available; however, systems can be protected by the Acronis Active Protection feature. It is integrated into all Acronis solutions, typically the Acronis Cyber Backup solution for enterprise backup and cyber protection. Acronis Active Protection can detect this ransomware, stop encryption in real time, and subsequently restore damaged files to their original state.
“Industrial enterprises are among the most vulnerable sectors. Attackers count on the fact that every day of halted production represents enormous financial losses, and companies will ultimately pay the ransom under pressure,” said Zdeněk Bínek, responsible for sales of Acronis solutions in the Czech Republic and Slovakia. “Companies today essentially have three options: pay the ransom, make every effort to restore their systems without paying, or proactively acquire a solution that protects them from the first two situations. It is not difficult to guess that prevention is the least costly of all three options—both in time and money.”
Many industrial companies around the world have faced ransomware attacks in recent times, including manufacturers Nissan, Renault, Norsk Hydro, TSMC, and ASCO. In the Czech Republic, OKD also experienced an attack on its infrastructure at the end of last year and had to suspend mining operations for 4 days as a result of the incident.
Article author: ZEBR.ai editorial team



