Officials are investigating an April 13 ransomware attack that targeted Stuart's city servers and forced it offline.

Dark Reading Staff, Dark Reading

April 24, 2019

1 Min Read

A ransomware attack targeting the city of Stuart, Fla., is believed to have started with a phishing email, officials say. The incident struck on April 13 and affected city servers and computers.

An investigation revealed it was the Ryuk strain of ransomware that targeted city machines and forced them offline. City manager David Dyess did not disclose the Bitcoin ransom demanded; he did report investigators are analyzing an infected machine to determine how the virus got in. Ryuk is the same ransomware seen in attacks against Jackson County, Ga., and Albany, N.Y.

So far, he says, it seems a brute-force attack is not to blame. Given the infected machine is a desktop computer with no external connectivity, officials think a phishing email could have been the attack vector. So far, Stuart has restored servers for functions including payroll, utilities, and budgeting; however, city employees still don't have access to their email accounts.

As of the latest update, Stuart's police and fire departments are still offline. Dyess expects service should be restored within the next week and a half, TCPalm reports.

Read more details here.

INT19-Logo-HorizDates-3035.png

 

 

 

Join Dark Reading LIVE for two cybersecurity summits at Interop 2019. Learn from the industry's most knowledgeable IT security experts. Check out the Interop agenda here.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights