- Alcaraz breezes into third round of Shanghai Masters
- Gaza cultural heritage brought to light in Geneva
- 'Bullet for democracy': Trump returns to site of rally shooting
- Italy targets climate activists in 'anti-Gandhi' demo clampdown
- South Korean cult-horror series 'Hellbound' returns at BIFF
- Nepalis fear more floods as climate change melts glaciers
- Honduras arrests environmentalist's alleged murderer
- Padres pitcher Musgrove needs elbow surgery
- Supreme Court lets stand rules to curb mercury, methane emissions
- Boston beat Denver in NBA exhibition season opener, but Jokic says omens are good
- Chagos diaspora angry at lack of input on islands' fate
- Biden says 'not confident' of peaceful US election
- US trade chief defends tariff hikes when paired with investment
- Lukaku stars as Napoli beat Como to hold Serie A top spot
- Ohtani set for MLB playoff debut as Dodgers face Padres
- Pogba's drug ban cut to 18 months from four years
- Devine leads New Zealand to big win over India in Women's T20 World Cup
- Bosnia floods kill 16 people
- EU court blocks French ban on vegetable 'steak' labelling
- Prosecutors seek dismissal of rape charges against French rugby players
- Meta AI turns pictures into videos with sound
- Bolivia's Morales says claims he raped a minor are a 'lie'
- MLB Reds hire two-time champion Francona as manager
- Daniel Maldini receives first Italy call-up for Nations League
- US dockworkers return to ports after three-day strike
- Ancelotti points finger at Madrid's 'lack of intensity'
- Haiti reeling after 70 killed in gang attack
- Five Czech kids in hospital over TikTok 'piercing challenge'
- What happens next in Iran-Israel conflict?
- Country star Garth Brooks denies rape accusations
- Stubbs hits maiden century as South Africa make 343-4 against Ireland
- DR Congo to begin mpox vaccination campaign Saturday in east
- Odegaard injury has forced Arsenal to be 'different', says Arteta
- Ratcliffe refuses to guarantee Ten Hag's Man Utd future
- Meta must limit data use for targeted ads: EU court
- Mauritius to hold legislative election on November 10
- Britain qualify for America's Cup final after 60-year wait
- IMF asks Sri Lanka to protect hard-won gains
- Morata returns to Spain Nations League squad after injury
- Irish regulator to probe Ryanair use of facial recognition
- Public allowed to see video evidence in France mass rape trial
- US hiring soars past expectations in sign of resilient market
- Under-fire Ten Hag 'together' with Man Utd hierarchy
- Guardiola talks of Man City love affair as financial hearing rumbles on
- De Bruyne out of Belgium Nations League squad
- Japanese trainer Yahagi hopes Shin Emperor achieves 50-year-old Arc dream
- UK's Starmer hails 'landmark' carbon capture funding
- As EU targets Chinese cars, European rivals sputter
- Bosnia floods kill 14 people
- Tennis world number one Swiatek splits with coach Wiktorowski
European oil port terminals hit by cyberattack
Major oil terminals in some of Western Europe's biggest ports have fallen victim to a cyberattack at a time when energy prices are already soaring, sources confirmed on Thursday.
Belgian prosecutors have launched an investigation into the hacking of oil facilities in the country's maritime entryways, including Antwerp, Europe's second biggest port after Rotterdam.
In Germany, prosecutors said they were investigating a cyberattack targeting oil facilities in what was described as a possible ransomware strike, in which hackers demand money to reopen hijacked networks.
Oil prices hit a seven-year high last month amid diplomatic tensions with gas supplier Russia, and energy bills are fuelling a rise in inflation that has spooked European policymakers.
According to a specialised broker, the alleged hacking is affecting several European ports and is disrupting the unloading of barges in this already strained market.
"There was a cyberattack at various terminals, quite some terminals are disrupted," said Jelle Vreeman, senior broker at Riverlake in Rotterdam.
"Their software is being hijacked and they can't process barges. Basically, the operational system is down," he said.
The EU's Europol police agency said it was aware of the incidents in Germany and had offered support to authorities.
"At this stage the investigation is ongoing and in a sensitive stage," Europol spokeswoman Claire Georges said.
One of the main victims seems to be the cross-border Dutch and Belgian Amsterdam-Rotterdam-Antwerp oil trading hub, where company IT systems were affected by the attack.
SEA-Tank Terminal, which has storage facilities in Antwerp, was hit, Belgian daily De Morgen reported.
The Dutch National Cyber Security Centre said the attacks were "probably committed with a criminal motive" and pledged to take further action "if necessary".
- 'Not grave' -
In Germany, two oil supply companies said they were victim to the cyberattack since Saturday January 29.
Both Oiltanking Deutschland GmbH and Mabanaft declared force majeure, an emergency legal clause that is used when a company cannot fulfil its supply contracts because of an unforeseeable event, a joint statement said.
"We are committed to resolving the issue and minimising the impact as quickly and effectively as possible," they said.
The head of Germany's IT security agency, Arne Schoenbohm, said at a conference on Tuesday that the incident was serious but "not grave", German media reports said.
According to the German newspaper Handelsblatt, an initial report from German security services identifies the BlackCat ransomware as the tool used in the cyberattack in Germany.
BlackCat emerged in mid-November 2021 as a software tool to allow hackers to seize control of target systems and has quickly gained notoriety for its sophistication and innovation.
According to US cybersecurity firm PaloAlto, BlackCat has the added advantage of being more lucrative than its rivals for the hackers who use it -- other ransomware platforms usually take a higher commission.
The experts also note that BlackCat's programmers use the Russian language, but this clue could be misleading since hackers often leave false clues to cover their tracks.
Recent ransomware attacks against targets in the United States and other western countries have been blamed on Russian-speaking hacker groups or those operating from Russian territory.
In June, US authorities said they had recovered a ransom payment paid by Colonial Pipeline to Russia-based ransomware extortionists Darkside, who had forced the shutdown of a major fuel network.
The attack caused short-term fuel shortages and drew attention to the broader threat that ransomware posed to essential infrastructure and services.
J.V.Jacinto--PC