Irish Rail Operator website Hacked and Asked to Pay Ransom in Bitcoins

Irsh rail operator website has been compromised and the attackers replaces the original websites files with a ransom note demanding to pay 1 bitcoin with 5 days.

Users who tried reaching the tram operator website last Tuesday saw a message claiming the website has been hacked and the company has taken the website down. Users are advised not to reach the website.

It appears more than 3,226 user records has been compromised in the cyber attack. The records are associated with the users who signed up to a Luas newsletter.

The ransom note displayed as follows

You are hacked
 some time ago i wrote that you have serious security holes
 you didn't reply
 the next time someone talks to you, press the reply button
 you must pay 1 bitcoin in 5 days
 otherwise I will publish all data and send emails to your users
 btc address: 3FsR4CTUmumBJK12Zk8QRwdpPTJEY11aSX

Luas confirmed no financial information has been compromised, and the company to contact the affected users within 24 hours.

The Luas website was compromised this morning , and a malicious message was put on the home page. The website has been taken down by the IT company who manage it, and their technicians are working on it. Luas are informed this may take the day to resolve.
— Luas (@Luas) January 3, 2019

Luas announced that website has been compromised and the malicious message added to the homepage of the website. We currently have technicians working on the issue.

The site is being analyzed to identify how the attack occurred and technicians are working to restore the service for the customer. Luas transportation was not affected by the attack.

The Attacker said he reported to tram operator about the security holes in the website, and the attack appears to be a defacement attack.

We will update customers via Twitter and Facebook, AA Road Watch and the media should there be any change to Luas services today. Customers can also contact Luas Customer on 1850 300 604 and [email protected] . We apologies to all Luas customers for the inconvenience.
— Luas (@Luas) January 3, 2019

Luas said that they will update customers via twitter, Facebook, AA Roadwatch and the media if there are any changes to services.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

15,779 Indian Websites Hacked During This Year (Jan – Nov) – CERT-India

3000 Hacked Websites Access comes to Sale in Russian Underground Dark Web Marketplace

Indian Hackers Group Hacked & Encrypt Pakistan Website Files Using KCW Ransomware