Sunday, May 18, 2025
HomeMalwareU.S. Coast Guard Computer Systems Infected by “Ryuk” Ransomware That Encrypts...

U.S. Coast Guard Computer Systems Infected by “Ryuk” Ransomware That Encrypts IT Network-Based Critical Files

Published on

SIEM as a Service

Follow Us on Google News

U.S. Coast Guard discloses a ransomware attack on a Maritime Transportation Security Act (MTSA) regulated facility by infamous “Ryuk” Ransomware.

“Ryuk” Ransomware involved with so many attacks that targeted various organizations, government networks and cause millions of dollar damages.

GBHackers recently reported that hackers compromise the U.S Massachusetts city computers with the Ryuk Ransomware and demanding $5.3 million to unlock the compromised computers.

- Advertisement - Google News

Also, The National Cyber Security Centre (NCSC) from the UK issued an alert for the Ryuk ransomware attack in July that is actively targeting global organizations associated with Emotet and TrickBot malware.

After the successful infection of Ryuk ransomware, All the non-executable files will be encrypted at the end of the infection process and displaying the ransomware notes with the demand of the ransom amount in bitcoin.

In this current attack in U.S. Coast Guard’s MTSA Facility Operations targeted via phishing email campaign, and trick the employees to execute the embedded malware link associated with the email.

“Ryuk Ransomware let threat actors access significant enterprise Information Technology (IT) network files, and encrypt them, preventing the facility’s access to critical files.”

The ransomware also propagates into the industrial control systems that monitor and control cargo transfer and encrypted files critical to process operations.

According to the report, The infection causes severe damage in the MTSA systems includes the following:

  • Entire corporate IT network
  • Disruption of camera
  • Disruption of physical access control systems
  • Loss of critical process control monitoring systems

The Coast Guard recommends facilities utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and NIST Special Publication 800-82 when implementing a Cyber Risk Management Program.

Coast Guard warned maritime stakeholders to verify the validity of the email sender prior to responding to or opening any unsolicited email messages to prevent the cyber attacks.

Also Read: Ransomware Attack Response and Mitigation Checklist

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

VMware ESXi, Firefox, Red Hat Linux & SharePoint Hacked – Pwn2Own Day 2

Security researchers demonstrated their prowess on the second day of Pwn2Own Berlin 2025, discovering...

Critical WordPress Plugin Flaw Puts Over 10,000 Sites of Cyberattack

A serious security flaw affecting the Eventin plugin, a popular event management solution for...

Sophisticated NPM Attack Leverages Google Calendar2 for Advanced Communication

A startling discovery in the npm ecosystem has revealed a highly sophisticated malware campaign...

New Ransomware Attack Targets Elon Musk Supporters Using PowerShell to Deploy Payloads

A newly identified ransomware campaign has emerged, seemingly targeting supporters of Elon Musk through...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

New Ransomware Attack Targets Elon Musk Supporters Using PowerShell to Deploy Payloads

A newly identified ransomware campaign has emerged, seemingly targeting supporters of Elon Musk through...

Printer Company Distributes Malicious Drivers Infected with XRed Malware

Procolored, a printer manufacturing company, has been found distributing software drivers infected with malicious...

Frigidstealer Malware Targets macOS Users to Harvest Login Credentials

An macOS users, a new information-stealing malware dubbed FrigidStealer has emerged as a formidable...