The Morpheus ransomware group claims to have breached SURTECH, a South Korean manufacturing leader specializing in the plating industry. With an estimated revenue of $5 million, SURTECHINC focuses on advanced plating technologies and the integration of cutting-edge HMI (Human-Machine Interface) systems designed to enhance production efficiency and quality.
Based on the evidence published by the threat actor, the allegedly compromised data includes highly sensitive operational and technical information. The allegedly compromised data includes:
-
Technical engineering drawings and CAD blueprints (including specific parts designed for ILJIN Corporation).
-
Screenshots and structural details of internal HMI systems used for monitoring their conveyorized finishing lines.
-
Application source code and configuration files containing highly sensitive hardcoded credentials, including server IP addresses and connection strings for internal SQL and Oracle databases.
