Blog Elements | SecurityOrb.com

A group of ransomware hackers known as “Babuk” leaked internal police files from the Washington, D.C. Metropolitan Police Department (MPD). The information was stolen in late April. The type of information that was released included officers’ personal information including psychological evaluations, credit history and Social Security numbers. In addition, the leaked information included polygraph tests, social media posts, employment history, financial liabilities and scanned copies of officers’ driver’s licenses. The leak occurred due to a break down in negotiations between MPD and Babuk who claimed the monetary offer the department made to prevent the leak was not enough. Babuk claimed to have stolen approximately 250 GB of information from the department which can equate to 127,000 songs or 37, 600 photos on your computer.

Security experts often recommend not paying the ransom after such an attack as it would only continue to fuel the ransomware tactics. Even the FBI has issued a statement regarding this type of cyber-attack stating:

“The FBI does not support paying a ransom in response to a ransomware attack,” the agency advises. “Paying a ransom doesn’t guarantee you or your organization will get any data back. It also encourages perpetrators to target more victims and offers an incentive for others to get involved in this type of illegal activity.”

Babuk’s tactics differ to the tactics of DarkSide in Babuk stole the data and threatened to release it unless a ransom demand was met while DarkSide encrypted files and demanded a ransom in exchange for unlocking them.

One of the nation’s largest fuel pipelines has been forced to shut down after being affected by a ransomware cyberattack. Ransomware is a form of malware that encrypts a victim’s files. The attacker then demands a ransom from the victim to restore access to the data upon payment.

Colonial Pipeline was forced to shut down its entire network as well as proactively take various systems offline to contain the threat, halting all pipeline operations. The massive US pipeline runs 5500 miles from Houston to New Jersey and transport 45% of all fuel to the East Coast.

The President has been briefed and the White House stated it is working with the organization to avoid disruption to supply and restore pipeline operations as quickly as possible, but it is still unclear to how long the pipelines will be off the grid.

Experts warn a prolonged delay could eventually impact consumers.

This latest attack comes amid growing concerns about the nation’s cybersecurity posture. Last December a massive software breach at Texas based SolarWinds was identified, where hackers reportedly gained access to the emails at U.S. government agencies. Also, in Florida, investigators stated hackers took control of the computer systems of a water treatment facility in an attempt to tamper with the water supply.

It’s important that organization take these attacks seriously since these attacks will continue and are not going away. So, it’s imperative that if you’re an owner operator of critical infrastructure that you invest in the cybersecurity controls.

Update: 5/10/21 at 7:40 am EST

A Russian criminal group may be responsible for a ransomware attack that shut down a major U.S. fuel pipeline, two sources familiar with the matter said Sunday.

The group, known as DarkSide, is relatively new, but it has a sophisticated approach to the business of extortion, the sources said.

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

Bad Ending for Washington, D.C.’s Metropolitan Police Department (MPD) after a Ransomware Attack

Colonial Pipeline Ransomware Attack

Bad Ending for Washington, D.C.’s Metropolitan Police Department (MPD) after a Ransomware Attack

Colonial Pipeline Ransomware Attack

Full Sized Blog Element (Big Preview Pic)

Bad Ending for Washington, D.C.’s Metropolitan Police Department (MPD) after a Ransomware Attack

Colonial Pipeline Ransomware Attack

INTERESTING LINKS

Latest News

Business Hours