Ransomware – Mærsk

The NotPetya ransomware attack hit Mærsk and caused a complete shutdown of container terminals globally. The company was forced to rebuild its entire infrastructure from scratch. The attack cost the company billions of DKK and is considered one of the most destructive cyberattacks in history.

The attack is attributed to a state-sponsored actor. NotPetya spread via a trojanized update to the M.E.Doc accounting software.

• Twitter — Mærsk official statement
• DR — Cyberangreb lægger Mærsk havne ned
• DR — Mærsk: vi har inddæmmet problemet
• Version2 — Container terminaler står stille
• Version2 — NotPetya: Mærsk skrinlagde opgradering
• Version2 — Mærsk topchef: vi geninstallerede komplet infrastruktur
• Version2 — NotPetya koster Mærsk milliardbeløb
• Version2 — Mærsk opjusterer omkostninger
• gvnshtn.com — Mærsk & NotPetya deep-dive
• Darknet Diaries — Episode 54
• New York Fed — Staff Report