Casa > cibernético Notícias > Back to the Past: Bitpaymer vírus Reverte Alasca Cidade para máquinas de escrever
CYBER NEWS

De volta ao passado: Bitpaymer vírus Reverte Alasca Cidade para máquinas de escrever

Aqui você vai encontrar pessoas como o ransomware cryptovirus BitPaymer haviam forçado em algumas partes do Alasca, EUA para voltar a usar máquinas de escrever. That is due to the computer systems getting compromised with said cryptovirus and as a prevention tactic, in order to stop the malware from spreading further. Mais que 200 victims had been struck with BitPaymer since it has come out, although most of them have happened within the last few weeks.




Origin of the BitPaymer Cyberattack in Alaska

On July 24th, a computer virus has hit the Anchorage Metropolitan Area no Alaska, EUA e mais especificamente, a Matanuska-Susitna (Mat-Su) borough. At first only servers were being disconnected from each other, but soon phones, e-mail and the Internet access of the Mat-Su borough followed. Ontem, on the 30th of July, borough officials have confirmed that they are still recovering most of their IT systems that have been compromised. The infrastructure is still slowly being rebuilt.

Semana passada, Public Affairs Director Patty Sullivan stated:

“Without computers and files, Borough employees acted resourcefully… They re-enlisted typewriters from closets, and wrote by hand receipts and lists of library book patrons and landfill fees at some of the 73 different buildings.

o IT Director of Matanuska-Susitna borough Eric Wyatt met with FBI agents last week to isolate and identify the virus and gather intelligence that could help the FBI in identifying the cybercriminals behind the threat and proceed with their prosecution.

Wyatt said the following regarding the virus:

“A multi-pronged, multi-vectored attack… not a single virus but multiple aspects of viruses together including trojan horse, Cryptolocker, time bomb, and dead man’s switch. This is a very insidious, very well-organized attack… it’s not a kid in his mom’s basement.

Ontem, uma PDF report was published with the IT Director identifying the cryptovirus as the BitPaymer Ransomware.

Story relacionado: FriedEx – Stealthy Ransomware Crafted by Dridex Authors

In the report, Eric Wyatt shared the following:

This attack appears to have been lying dormant and/or undiscovered within our network since as early as May 3rd

The anti-virus software had started detecting the troiano parte de BitPaymer ransomware from July 17th.

Repercussions After Tampering With BitPaymer

senhas were changed forcefully by IT higher-ups, a few days later, to re-gain some access and admin privileges to systems. Trying to delete parts of the virus with a manually-made script had triggered the Crypto Locker component of the malware package. Eric Wyatt added:

“This trigger may have been automated, uma Dead Man’s Switch, or there may have been a person manually monitoring activity and executed their Comando e controle (C2) to launch the attack.”

The result was devastating as close as 500 Mat-Su desktop workstations e 120 fora de 150 Mat-Su servers’ encryption followed. The network had been brought offline by Wyatt, a FBI had been notified promptly and the rebuilding operation had been set in motion. Felizmente, alguns backups had remained unaffected and partial data has been successfully recovered since.

Wyatt also revealed that the city of Valdez, Alaska had also experienced a similar attack, which looks like to be a BitPaymer infection também. On July 28, Valdez city officials confirmed in an official Facebook statement that they are dealing with a computer virus.

Por aí 650 desktop computers and servers located on the Matanuska-Susitna network seem to be compromised by the cryptovirus and are said to be wiped and reinstalled. From last week, including a busy weekend, 110 employee workstation PCs have been cleaned and deemed ready for work with the help of 20 different agencies and vendors from the private sector. The reconstruction of the Mat-Su governmental IT infrastructure is still in the works, as for a start the phone server has been rebuilt at Sunday night.

Story relacionado: Sobre 5,000 HPE iLO 4 Interfaces batida por ransomware

Payment card data was considered safe due to it being stored by third-party providers instead of on servers of the Mat-Su Borough. Interessantemente suficiente, the borough’s door lock card swipe system had been encrypted, but still working and the official Matanuska-Susitna website was not compromised. The Facebook page of Mat-Su served as an information outlet to the public, keeping people up-to-date with news surrounding the incident and current recovery progress.

Alaska should be able to recover its ISTO systems to normal within the next few days or weeks, considering more residual components or infected systems are found.

Tsetso Mihailov

Tsetso Mihailov

Tsetso Mihailov é um tech-geek e ama tudo o que é tech-relacionados, enquanto observa as últimas notícias em torno tecnologias. Ele já trabalhou em TI antes, como um administrador de sistema e um técnico de manutenção de computador. Lidar com malware desde a adolescência, Ele está determinado a notícia se espalhou sobre as últimas ameaças giram em torno de segurança do computador.

mais Posts

Me siga:
Twitter

Deixe um comentário

seu endereço de e-mail não será publicado. Campos obrigatórios são marcados *

Compartilhar no Facebook Compartilhar
Carregando...
Compartilhar no Twitter chilrear
Carregando...
Compartilhar no Google Plus Compartilhar
Carregando...
Partilhar no Linkedin Compartilhar
Carregando...
Compartilhar no Digg Compartilhar
Compartilhar no Reddit Compartilhar
Carregando...
Partilhar no StumbleUpon Compartilhar
Carregando...