WDRB has only a short item on this, but reportedly no ransom has been paid and the airport is restoring from backup. Operations and security systems were reportedly not impacted.
Category: Malware
TeamViewer Confirms Undisclosed Breach From 2016
Sergiu Gatlan reports: TeamViewer confirmed today that it has been the victim of a cyber attack which was discovered during the autumn of 2016, but was never disclosed. This attack is thought to be of Chinese origins and utilized the Winnti backdoor. The company behind the highly popular TeamViewer remote desktop software told German publisher Der Spiegel that…
Analysis of ransomware used in Baltimore attack indicates hackers needed ‘unfettered access’ to city computers
Ian Duncan and Christine Zhang report: Officials in the eastern North Carolina city of Greenville arrived to work one morning in early April to find the files on some 800 of their computers locked up. More than five weeks later, they’re still recovering from the debilitating cyberattack. The city of around 92,000 realized April 10…
Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers
Renee Dudley and Jeff Kao report that two firms that advertised technology solutions to responding to ransomware incidents — Proven Data Recovery of Elmsford, New York and Florida-based MonsterCloud – were really just paying ransom to the attackers. Read more on ProPublica. I suspect that ransom payments have been the dirty little secret for the…
GozNym malware: cybercriminal network dismantled in international operation
A press release from Europol today: An unprecedented, international law enforcement operation has dismantled a complex, globally operating and organised cybercrime network. The criminal network used GozNym malware in an attempt to steal an estimated $100 million from more than 41 000 victims, primarily businesses and their financial institutions. A criminal Indictment returned by a…
OKCPS confirms ransomware cyber-attack
Lili Zheng reports: Oklahoma City Public Schools have confirmed they are addressing a recent ransomware attack, compromising the district’s network. On Monday, OKCPS stated their network was “significantly compromised by a form of malware” and that the issue was “continuing to worsen.” Early Tuesday evening, an updated statement from the district confirmed that ‘form’ of…