U.S. Coast Guard discloses a ransomware attack on a Maritime Transportation Security Act (MTSA) regulated facility by infamous “Ryuk” Ransomware.
“Ryuk” Ransomware involved with so many attacks that targeted various organizations, government networks and cause millions of dollar damages.
GBHackers recently reported that hackers compromise the U.S Massachusetts city computers with the Ryuk Ransomware and demanding $5.3 million to unlock the compromised computers.
Also, The National Cyber Security Centre (NCSC) from the UK issued an alert for the Ryuk ransomware attack in July that is actively targeting global organizations associated with Emotet and TrickBot malware.
After the successful infection of Ryuk ransomware, All the non-executable files will be encrypted at the end of the infection process and displaying the ransomware notes with the demand of the ransom amount in bitcoin.
In this current attack in U.S. Coast Guard’s MTSA Facility Operations targeted via phishing email campaign, and trick the employees to execute the embedded malware link associated with the email.
“Ryuk Ransomware let threat actors access significant enterprise Information Technology (IT) network files, and encrypt them, preventing the facility’s access to critical files.”
The ransomware also propagates into the industrial control systems that monitor and control cargo transfer and encrypted files critical to process operations.
According to the report, The infection causes severe damage in the MTSA systems includes the following:
The Coast Guard recommends facilities utilize the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and NIST Special Publication 800-82 when implementing a Cyber Risk Management Program.
Coast Guard warned maritime stakeholders to verify the validity of the email sender prior to responding to or opening any unsolicited email messages to prevent the cyber attacks.
Also Read: Ransomware Attack Response and Mitigation Checklist
The LightSpy threat actor exploited publicly available vulnerabilities and jailbreak kits to compromise iOS devices.…
White House National Cyber Director, CEOs, Key Financial Services Companies, Congressional and Executive Branch Experts…
Cybersecurity experts have identified a new Remote Access Trojan (RAT) named PySilon. This Trojan exploits…
The notorious Konni Advanced Persistent Threat (APT) group has intensified its cyber assault on organizations…
Google has updated its Chrome browser, addressing critical vulnerabilities that posed potential risks to millions…
WrnRAT is a new malware attack that cybercriminals have deployed by using popular gambling games…