Friday, February 14, 2025
HomeSecurity NewsHackers Breached Sacramento Regional Transit System and Demands $8,000 Ransom

Hackers Breached Sacramento Regional Transit System and Demands $8,000 Ransom

Published on

SIEM as a Service

Follow Us on Google News

Hackers Breached Sacramento Regional Transit System computers on last Saturday and deleted some data from the agency’s servers that affects their internal operations.

Attackers defaced and modified the homepage and displayed the following message on their homepage.You can still see it from Google cache.

Also Read:  Uber Data Breach Exposed Personal Information of 57 Million Uber Users Around the World

I’m sorry to modify the home page, i’m good hacker, i I just want to help you fix these vulnerability
This is one of the loopholes, modify the home page is to let you know there are loopholes, Not just this one loophole!
It’s Very Dangerous!!please contact me as soon as possible Please contact me email to help you fix these vulnerability:) nesddjerfn@protonmail.com
Sacramento

Then the agency shut down the website, closes the payment gateway until the bug was fixed. No infection with the agency’s mobile app it remains fully operational.

Regional Transit officials said they have determined that no data was stolen and are working to secure their system from further attack. Bus and rail service has not been affected.

Hackers contact SacRT through facebook saying, “hello, I will always attack your website, we are hackers. we can do everything. Pay us now to stop attacking.” They demand SacRT pay $8,000 as ransom.

“We caught it early (Sunday) morning,” he said. “We took all our systems offline” and determined what data had been erased. “We are restoring everything now and bringing it up online.”

Last year San Francisco Municipal Transportation Agency was targeted and thousands of computers at the SFMTA were scrambled with strong Encryption.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Fake BSOD Attack Launched via Malicious Python Script

A peculiar malicious Python script has surfaced, employing an unusual and amusing anti-analysis trick...

SocGholish Malware Dropped from Hacked Web Pages using Weaponized ZIP Files

A recent wave of cyberattacks leveraging the SocGholish malware framework has been observed using...

Lazarus Group Targets Developers Worldwide with New Malware Tactic

North Korea's Lazarus Group, a state-sponsored cybercriminal organization, has launched a sophisticated global campaign...

North Korean IT Workers Penetrate Global Firms to Install System Backdoors

In a concerning escalation of cyber threats, North Korean IT operatives have infiltrated global...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

New FUD Malware Targets MacOS, Evading Antivirus and Security Tools

A new strain of Fully Undetectable (FUD) macOS malware, dubbed "Tiny FUD," has emerged,...

Google Blocks 2.28 Million Malicious Apps from Play Store in Security Crackdown

In a continued commitment to enhancing user safety and trust, Google has outlined significant...

Hackers Exploiting DNS Poisoning to Compromise Active Directory Environments

A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently...