Hakan Tanriverdi, Svea Eckert, Jan Strozyk, Maximilian Zierer, and Rebecca Ciesielski report: This investigation starts with a code: daa0 c7cb f4f0 fbcf d6d1. If you know what to look for, you’ll find Winnti. Hackers who have been spying on businesses all over the world for years. A group, presumably China-based, has honed in on Germany…
Category: Malware
New Haven Public Schools hit by ransomware attack
Brian Zahn reports: The New Haven Public School district was hit by a recent ransomware attack, an official confirmed Wednesday. NHPS COO Mike Pinto said the district had “restored all critical functions” to its computers by Wednesday morning, but would not divulge details on what functions or files, if any, were still compromised. Read more…
Maitland dentist office threatened with $20,000 ransomware
Amanda Martinez reports: A dentist office in Maitland is the latest victim of a ransomware attack in Seminole County. Dr. Carl Bilancione said all of his Quickbooks accounting files were encrypted and a pop-up screen instructed him to pay $10,000. Every 48 hours, the ransom would double, according to the message. “What the IT people ascertained is…
GA: Henry County networks still offline five days after malware attack
Leon Stafford reports: Henry County’s computer system remained down early Monday, five days after malware is suspected to have been planted in the south metro community’s network. Websites for various departments such as state court, tax assessor and board of commissioners continued Monday to be inaccessible. Public safety such as police and fire were not…
PA: Ransomware Attack Hits Local Libraries
Henry Ibinson reports: The Butler County Federated Library System continues to work on their online system following a ransomware attack that occurred last week. According to the Butler Area Public Library’s Facebook page, several of the county’s libraries began to experience technical difficulties last Wednesday (July 17th). Read more on Butler Radio.
QuickBooks Cloud Hosting Firm iNSYNQ Hit in Ransomware Attack
Brian Krebs writes: Cloud hosting provider iNSYNQ says it is trying to recover from a ransomware attack that shut down its network and has left customers unable to access their accounting data for the past three days. Read more on KrebsOnSecurity.com.