BFF-11 Latest ransomware victim, New Orleans crippled by attack

264

ZCZC

BFF-11

US-IT-CRIME-HACKING

Latest ransomware victim, New Orleans crippled by attack

SAN FRANCISCO, Dec 17, 2019 (BSS/AFP) – City services in New Orleans were hobbled Monday as

the city operated under an emergency declaration following a cyber attack that locked down

its main computer networks.

In the attack detected Friday, New Orleans became the latest major city to be hit by

ransomware in what has become an epidemic that has crippled networks in Baltimore and Atlanta

in recent months as well as hundreds of other municipalities and agencies.

The city declared an emergency and shut down its computers after detecting it was under

attack by hackers with cyber tactics that included “phishing” attempts and ransomware.

City Hall was open and employees expected to report to work, but various municipal services

and departments remained hobbled without some of the technology they typically rely on,

according to officials.

Mayor LaToya Cantrell said the police department was “manually” recording incidents and had

suspended background checks.

But she said fire and emergency medical services were not impacted and that a temporary

website had been set up for some other services.

“The city remains actively involved in recovery efforts,” the mayor’s office said in a

statement.

Security researchers said the city appeared to have been hit by a strain of ransomware

which encrypted and locked down data from its contracts and revenue operations.

New Orleans officials told media over the weekend they had not received any demand for

payment to unlock data.

Governments are considered ripe targets by hackers because they usually lack resources to

invest in sophisticated cyber defenses and can be attack on may fronts, such as schools or

town halls.

At least 174 cities around the world were victims of ransomware attacks in 2019, a figure

up 60 percent from 2018, according to cybersecurity company Kaspersky.

The average amount of ransom demanded was said to be a million dollars, and has been as

high as $5 million.

While the price seems high, costs of lost data or re-creating computing systems can be

higher, making local governments inclined to pay ransom even if budgets are meager, according

to Kaspersky.

A separate report by the security firm Emsisoft painted an even darker picture, citing 948

government agencies, educational establishments and healthcare providers impacted by

ransomware this year in the United States alone.

“The threat level is now extreme and governments must act immediately to improve their

preparedness and mitigate their risks,” Emsisoft said in a blog post.

BSS/AFP/AU/08:30 hrs