Hackers halted Argentina borders service after ransomware attack

Hackers halted Argentina borders service after ransomware attack

Argentina’s immigration agency network was compromised with NetWalker ransomware.


Border crossings in Argentina were temporarily shut down after computer networks at the regional offices of Dirección Nacional de Migraciones, the Argentinean immigration agency, were attacked with ransomware. The hackers were demanding $4 million in Bitcoin.


The attack occurred on 27 August, and Unidad Fiscal Especializada en Ciberdelincuencia, the cybercrime agency of Argentina, was immediately notified. Authorities later identified the hackers as NetWalker ransomware operators.



“(The team) realized that it was not an ordinary situation, and evaluated the Central Data and Distributed Servers infrastructure, noting the activity of a virus that had affected the system’s MS Windows-based files (mainly ADAD SYSVOL and SYSTEM CENTER DPM) and Microsoft Office files (Word, Excel, etc.)  in users’ jobs and shared folders,” said the complaint.


NetWalker is a ransomware operation that mainly targets corporate computer networks and encrypts all Microsoft applications, including MS Office. After encrypting all the data available on the victim’s system, the attackers demand a ransom to exchange the password.


Argentinean news service Infobae reported that the attack caused all country border crossings to shut down for almost four hours. During this time, the authorities shut down all the computer networks used at their regional offices and checkpoints.  


See: Revil hackers hit State Bank of Chile with ransomware attack


The agency filed a criminal complaint stating that Netwalker r ..

Support the originator by clicking the read the rest link below.