Attacks/Breaches

8/9/2018
01:20 PM
50%
50%

PGA of America Struck By Ransomware

Hackers provided a Bitcoin wallet number, though no specific ransom amount was demanded, for the return of files.

While golfing fans have been all about this week's PGA Championship, extortion-minded hackers were more focused on the PGA of America's computer servers.

On Tuesday, employees at the sporting organization found themselves locked out of files relating to marketing materials for this week's event, in Missouri, and next month's Ryder Cup in France.

According to Golfweek, "Staff realized Tuesday morning that their systems had been compromised when attempts to work on the files generated an ominous message: 'Your network has been penetrated. All files on each host in the network have been encrypted with a strong algorythm [sic].'"

They were also warned not to try to break the encryption or else they might not be able to get back certain files.

The PGA said it won't respond to exortion demands; the hackers had included a Bitcoin wallet number, though no specific ransom amount was demanded. The situation remains unresolved as of yesterday.

Read more details here

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
8/13/2018 | 3:43:49 PM
Oh - eh - did they have a BACKUP?
Sounds like another case where an effective and tested backup and restoration plan WOULD be helpful.  I have been writing this for years and years.   Today I still have several 3.5" floppies (remember) from some of my earliest computers containing data.  Hey, you never know?
Higher Education: 15 Books to Help Cybersecurity Pros Be Better
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
Worst Password Blunders of 2018 Hit Organizations East and West
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20168
PUBLISHED: 2018-12-17
Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.
CVE-2018-20167
PUBLISHED: 2018-12-17
Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe "cat README.md" command when \e}pn is used. A popmedia control sequence can allow the malicious execution of executable file formats registered in the X desktop share MIME typ...
CVE-2018-20161
PUBLISHED: 2018-12-15
A design flaw in the BlinkForHome (aka Blink For Home) Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips (triggered by the motion sensor) are not saved if the attacker's traffic (such as Dot11Deauth) successfully disconnects the Sync Module from the...
CVE-2018-20159
PUBLISHED: 2018-12-15
i-doit open 1.11.2 allows Remote Code Execution because ZIP archives are mishandled. It has an upload feature that allows an authenticated user with the administrator role to upload arbitrary files to the main website directory. Exploitation involves uploading a ".php" file within a "...
CVE-2018-20157
PUBLISHED: 2018-12-15
The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.