Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security //

Ransomware

1/15/2019
07:00 AM
Scott Ferguson
Scott Ferguson
News Analysis-Security Now
50%
50%

Texas City Hit With Ransomware

It's back to paper and pen for a while for Del Rio, Texas, which was hit with a ransomware attack earlier this month.

Ransomware knows no geographic bounds.

On January 10, the city of Del Rio, Texas, posted on its official website that its servers were hit by a ransomware attack, which had disabled most of the municipality's IT systems.

The Management Information Services Department, Del Rio's IT department, managed to isolate the ransomware attack, but this meant cutting off the Internet connections for all the city's departments and employees could no longer log in to various systems

For now, Del Rio is back to the analogue days of paper, pen and pencil to conduct city business. The FBI has been notified of the incident and the US Secret Service is also involved. It's not clear what type of ransomware hit the city's servers.

Del Rio is also investigating what happened and what, if any, personal data from city residents might have been compromised.

"It is uncertain whether anyone's personal data has been compromised. This is uncertain as to both employee data and customer," according to the city's website.

At least some of the city's IT systems remained offline as of Monday, January 14. A notice on the town's website urged residents to pay their utility bills at city hall and they would need to pay in cash or by check.

When ransomware attacks increased in 2017, thanks to the rapid spread of WannaCry, the incidents largely focused on private businesses, which have the money and motivation to pay the ransom. At the same time, private enterprises can keep these attacks under wraps. (See Cloud Backup: How It Can Protect Against Ransomware.)

However, as Security Now noted last year, ransomware is increasingly showing up in public venues and facilities, including Baltimore, Atlanta, the Port of San Diego and the Port of Barcelona. Due to the nature of government, it's difficult, if not impossible, to keep an attack secret from the citizens these agencies serve. (See Ransomware Attacks Target Public & Government Orgs With More Frequency, Ferocity.)

Del Rio, which is the county seat of Val Verde County in Texas, has a population of about 40,500 and is home to Laughlin Air Force Base. It might not be as large as Atlanta or Baltimore, but the attack shows that ransomware can appear anywhere and cripple systems even if no money is ever paid out to the attackers.

Related posts:

— Scott Ferguson is the managing editor of Light Reading and the editor of Security Now. Follow him on Twitter @sferguson_LR.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 11/19/2020
New Proposed DNS Security Features Released
Kelly Jackson Higgins, Executive Editor at Dark Reading,  11/19/2020
How to Identify Cobalt Strike on Your Network
Zohar Buber, Security Analyst,  11/18/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: He hits the gong anytime he sees someone click on an email link.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-29071
PUBLISHED: 2020-11-25
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform as attachments, when the -htmlview URL is directly accessed. The impact ranges from executing commands as root on the server to retrieving se...
CVE-2020-29072
PUBLISHED: 2020-11-25
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction (opening a link) and successful exploitation could lead to encrypted e-mail content leakage via messages/sent?format=js and popup?format=js.
CVE-2020-26241
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy (at 0x00...04) co...
CVE-2020-26242
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service (crash) during block processing. This is fixed in 1.9.18.
CVE-2020-26240
PUBLISHED: 2020-11-25
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on...