CRESS TECH: ransomware, likely through a misconfigured UTM device

On 26 March 2024 CRESS TECH, a plant engineering company in Taito, Tokyo, disclosed a ransomware attack that encrypted data on its servers. On 23 March it found it could not access server data, stopped its internal systems and cut them off from outside networks. Its second report of 29 March said an outside firm's investigation found the attack very likely exploited a weakness caused by a misconfigured UTM device. It reported to the police and the Personal Information Protection Commission.