{
	"id": "333539a1-e31d-4ca9-a5e8-9cc8f9ea7e4c",
	"created_at": "2026-04-06T00:18:40.993615Z",
	"updated_at": "2026-04-10T03:21:39.956256Z",
	"deleted_at": null,
	"sha1_hash": "b20e8ab33a1b6784d1312d841f6fe1046fc9c43c",
	"title": "Enel Group hit by ransomware again, Netwalker demands $14 million",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 2364057,
	"plain_text": "Enel Group hit by ransomware again, Netwalker demands $14 million\r\nBy Ionut Ilascu\r\nPublished: 2020-10-27 · Archived: 2026-04-05 14:09:16 UTC\r\nMultinational energy company Enel Group has been hit by a ransomware attack for the second time this year. This time by\r\nNetwalker, who is asking a $14 million ransom for the decryption key and to not release several terabytes of stolen data.\r\nEnel is one of the largest players in the European energy sector, with more than 61 million customers in 40 countries. As of\r\nAugust 10, it ranks 87 in Fortune Global 500, with a revenue of almost $90 billion in 2019.\r\nEnel hit with Netwalker Ransomware attack\r\nIn early June, Enel's internal network was attacked by Snake ransomware, also referred to as EKANS, but the attempt was\r\ncaught before the malware could spread.\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 1 of 6\n\n0:00\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 2 of 6\n\nVisit Advertiser websiteGO TO PAGE\r\nOn Octber 19th, a researcher shared a Netwalker ransom note with BleepingComputer that appeared to be from an attack on\r\nEnel Group.\r\nNetwalker ransom note for Enel Group\r\nIncluded in the ransom note, was a link to a http://prnt.sc/ URL that showed data stolen from the attack. Based on the names\r\nof the employees in the folders, it was determined that the attack was on Enel Group.\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 3 of 6\n\nScreenshot of stolen data shared in ransom note\r\nBleepingComputer emailed Enel Group last week regarding the attack but never heard back.\r\nA few days later, Netwalker confirmed that the victim was Enel Group after they added a message to their support chat,\r\nstating \"Hello Enel. Dont be afraid to write us.\"\r\nNetwalker chat section for Enel victim page\r\nTypically, if the company does not engage the ransom operator in any way, the ransom doubles after a while. It appears that\r\nthis is what happened with Enel, too, as the private chat provided by the attacker has no conversation from the company.\r\nThe attacker used this channel to announce that they would initiate the first step towards leaking the stolen data. This means\r\npublishing proof that they have the goods, an attempt to pressure the company into paying the ransom, which is now $14\r\nmillion (1234.02380000 BTC).\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 4 of 6\n\n$14,000,000 million ransom demand\r\nToday, the Netwalker ransomware gang added Enel Group to their data leak site and shared screenshots of unencrypted files\r\nfrom the company during this month's cyberattack.\r\nAccording to Netwalker, they stole about 5 terabytes of data from Enel and are ready to make public a piece of it in a week.\r\nThey also said they would \"analyze every file for interesting things\" and publish it on their leak site.\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 5 of 6\n\nThis tactic is meant to add pressure and force payment from the victim company. In many cases, this works to the advantage\r\nof the attacker.\r\nAutomated Pentesting Covers Only 1 of 6 Surfaces.\r\nAutomated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the\r\nother.\r\nThis whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic\r\nquestions for any tool evaluation.\r\nSource: https://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nhttps://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million\r\nPage 6 of 6",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://www.bleepingcomputer.com/news/security/enel-group-hit-by-ransomware-again-netwalker-demands-14-million"
	],
	"report_names": [
		"enel-group-hit-by-ransomware-again-netwalker-demands-14-million"
	],
	"threat_actors": [],
	"ts_created_at": 1775434720,
	"ts_updated_at": 1775791299,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/b20e8ab33a1b6784d1312d841f6fe1046fc9c43c.pdf",
		"text": "https://archive.orkl.eu/b20e8ab33a1b6784d1312d841f6fe1046fc9c43c.txt",
		"img": "https://archive.orkl.eu/b20e8ab33a1b6784d1312d841f6fe1046fc9c43c.jpg"
	}
}