The Anubis Ransomware Attack on the Adriatic Port Authority

### Executive Summary The report describes a targeted Anubis ransomware attack on the Adriatic Port Authority that used spear-phishing and known CVE-based exploits to gain access, exfiltrate sensitive data, and encrypt systems—disrupting port operations and causing multimillion-dollar losses; it profiles Anubis as an active RaaS actor with an affiliate program, outlines observed TTPs and exploited public-facing vulnerabilities, and provides remediation and regulatory guidance for port authorities.