Hackers have been holding the city of Baltimore’s computers hostage for 2 weeks
[VOX] Hackers targeted the city of Baltimore on May 7 using a ransomware called RobbinHood, which, as NPR explains, makes it impossible to access a server without a digital key that only the hackers have.
The Baltimore hackers’ ransom note, obtained by the Baltimore Sun, demanded payment of three bitcoins per system to be unlocked, which amounts to 13 bitcoins to unlock all the seized systems. The note threatened to increase the ransom if it wasn’t paid in four days, and said the information would be lost forever if it wasn’t paid in 10 days. Both deadlines have now passed.
"We won’t talk more, all we know is MONEY! Hurry up! Tik Tak, Tik Tak, Tik Tak!" the note said.
The city government is refusing to pay, meaning that the government email systems and payment platforms the attack took down remain offline. The attack has also harmed Baltimore’s property market, because officials weren’t able to access systems needed to complete real estate sales. (The city said transactions resumed on Monday.)
Baltimore Mayor Jack Young, who’s officially been in his office less than a month, said in a statement on Friday that city officials are "well into the restorative process" and have "engaged leading industry cybersecurity experts who are on-site 24-7 working with us." The FBI is also involved in the investigation.
"Some of the restoration efforts also require that we rebuild certain systems to make sure that when we restore business functions, we are doing so in a secure manner," Young said. He did not offer a timeline for when all systems will come back online.
The Baltimore City Council president also plans to form a special committee to investigate this latest attack and try to ensure it doesn’t happen again.
A similar attack using RobbinHood hit government computers in Greenville, North Carolina, in April. A spokesperson for Greenville told the Wall Street Journal that the city never wound up paying, and that while its systems aren’t entirely restored, "all of our major technology needs are now being met."
More than 20 municipalities in the US have been hit by cyberattacks this year alone. And such attacks can be expensive, perhaps especially if targets say they won’t pay. In 2018, hackers demanded that Atlanta pay about $50,000 in bitcoins as part of a ransomware attack. The city refused, and according to a report obtained by the Atlanta Journal-Constitution and Channel 2 Action News, the attack wound up costing the city $17 million to fix.
Posted by: Fred 2019-05-23