Categories: MalwareRansomware

U.S. Coast Guard Computer Systems Infected by “Ryuk” Ransomware That Encrypts IT Network-Based Critical Files

U.S. Coast Guard discloses a ransomware attack on a Maritime Transportation Security Act (MTSA) regulated facility by infamous “Ryuk” Ransomware.

“Ryuk” Ransomware involved with so many attacks that targeted various organizations, government networks and cause millions of dollar damages.

GBHackers recently reported that hackers compromise the U.S Massachusetts city computers with the Ryuk Ransomware and demanding $5.3 million to unlock the compromised computers.

Also, The National Cyber Security Centre (NCSC) from the UK issued an alert for the Ryuk ransomware attack in July that is actively targeting global organizations associated with Emotet and TrickBot malware.

After the successful infection of Ryuk ransomware, All the non-executable files will be encrypted at the end of the infection process and displaying the ransomware notes with the demand of the ransom amount in bitcoin.

In this current attack in U.S. Coast Guard’s MTSA Facility Operations targeted via phishing email campaign, and trick the employees to execute the embedded malware link associated with the email.

“Ryuk Ransomware let threat actors access significant enterprise Information Technology (IT) network files, and encrypt them, preventing the facility’s access to critical files.”

The ransomware also propagates into the industrial control systems that monitor and control cargo transfer and encrypted files critical to process operations.

According to the report, The infection causes severe damage in the MTSA systems includes the following:

  • Entire corporate IT network
  • Disruption of camera
  • Disruption of physical access control systems
  • Loss of critical process control monitoring systems

The Coast Guard recommends facilities utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and NIST Special Publication 800-82 when implementing a Cyber Risk Management Program.

Coast Guard warned maritime stakeholders to verify the validity of the email sender prior to responding to or opening any unsolicited email messages to prevent the cyber attacks.

Also Read: Ransomware Attack Response and Mitigation Checklist

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting victims…

11 hours ago

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ advanced…

12 hours ago

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to execute…

14 hours ago

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities, including…

18 hours ago

Veritas Enterprise Vault Vulnerabilities Lets Attackers Execute Arbitrary Code Remotely

Critical security vulnerability has been identified in Veritas Enterprise Vault, a widely-used archiving and content…

19 hours ago

7-Zip RCE Vulnerability Let Attackers Execute Remote Code

A critical security vulnerability has been disclosed in the popular file archiving tool 7-Zip, allowing…

19 hours ago