New York State Comptroller Thomas P. DiNapoli announced school district audits this week. Here are the summaries with links to the audit reports: Hudson City School District – Information Technology (Columbia County) District officials did not adequately secure and protect its information technology (IT) systems against unauthorized use, access and loss. The board and district…
Phone House Spain hit by Babuk ransomware, 3 million users affected.
Marco A. DeFelice reports: Before the news became public, SuspectFile had tried in vain to contact Phone House Spain already on Friday morning informing them that, in the event of non-payment of the ransom of 6 million dollars (just over 97 bitcoins at the exchange rate of Friday 16 April ed) and that the following day ( Saturday 17…
Adversary Dossier: Ryuk Ransomware Anatomy of an Attack in 2021
Vitali Kremez, Al Calleo, and Yelisey Boguslavskiy report: This report illustrates some of the new and existing Tactics, Techniques, and Procedures (TTPs) of the Ryuk ransomware variants that Advintel has witnessed throughout their investigations in 2021. Initial Attack Vector: RDP Brute Force / Other Means of Initial Attack Vector Ryuk operators gain initial access to…
BR: The National Library website falls victim to a ransomware attack and goes offline
Wellington Arruda reports (translation): Last Sunday [April 11], the National Library website was the target of a ransomware attack and needed to be taken down. The agency, linked to the Special Secretariat for Culture, opted to shut down the servers to alleviate the potential problems caused and new invasions. However, last Tuesday [April 13] the site was activated again, and…
CH: Schaffhausen hospitals suffer major IT failures
Philipp Anz reports (translation): On the night of April 13, the Schaffhausen hospitals were victims of a network infrastructure interruption in the cantonal IT service, mainly affecting the administrative and communication area. Read more on inside-it. On April 15, IT company KSD reported “The network of Schaffhausen hospitals became fully functional as of 2:30 am,…
“Without Undue Delay,” Saturday edition: D.C.’s Planned Parenthood reports data was breached last fall
Brittany Renee Mayes reports: Planned Parenthood of Metropolitan Washington, D.C., on Friday revealed it had a breach of patient information last fall. In a notice posted to its website, the organization revealed that it found “unusual” activity on its networks on Sept. 3. At that time, it began securing its systems, started an investigation and…