Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint

4/23/2019
03:15 PM
50%
50%

City of Stuart Still Recovering from Ryuk Ransomware Attack

Officials are investigating an April 13 ransomware attack that targeted Stuart's city servers and forced it offline.

A ransomware attack targeting the city of Stuart, Fla., is believed to have started with a phishing email, officials say. The incident struck on April 13 and affected city servers and computers.

An investigation revealed it was the Ryuk strain of ransomware that targeted city machines and forced them offline. City manager David Dyess did not disclose the Bitcoin ransom demanded; he did report investigators are analyzing an infected machine to determine how the virus got in. Ryuk is the same ransomware seen in attacks against Jackson County, Ga., and Albany, N.Y.

So far, he says, it seems a brute-force attack is not to blame. Given the infected machine is a desktop computer with no external connectivity, officials think a phishing email could have been the attack vector. So far, Stuart has restored servers for functions including payroll, utilities, and budgeting; however, city employees still don't have access to their email accounts.

As of the latest update, Stuart's police and fire departments are still offline. Dyess expects service should be restored within the next week and a half, TCPalm reports.

Read more details here.

 

 

 

Join Dark Reading LIVE for two cybersecurity summits at Interop 2019. Learn from the industry's most knowledgeable IT security experts. Check out the Interop agenda here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
4/23/2019 | 3:35:58 PM
sigh again..............................
disaster recovery plan ....... user education ...... busines continuity plans ....... test protocols.  
Black Hat Q&A: Hacking a '90s Sports Car
Black Hat Staff, ,  11/7/2019
The Cold Truth about Cyber Insurance
Chris Kennedy, CISO & VP Customer Success, AttackIQ,  11/7/2019
6 Small-Business Password Managers
Curtis Franklin Jr., Senior Editor at Dark Reading,  11/8/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-4652
PUBLISHED: 2019-11-12
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.
CVE-2011-3618
PUBLISHED: 2019-11-12
atop: symlink attack possible due to insecure tempfile handling
CVE-2012-1109
PUBLISHED: 2019-11-12
mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions
CVE-2019-18848
PUBLISHED: 2019-11-12
The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.
CVE-2011-5271
PUBLISHED: 2019-11-12
Pacemaker before 1.1.6 configure script creates temporary files insecurely