Image courtesy Brett Callow
A threat analyst shared on Twitter on Monday that the official Waynesboro local government network may have been infiltrated by BianLian Ransomware.
The tweet shows that #BianLian claims to have city government information including fileserver data, files from the internal police station fileserver, public relations and various business files, notes and manuals.
The police department files are said to include reports, criminal investigations, staff personal data, internal files and manuals.
The attacker mentions specifically Mayor Lana Williams, Vice Mayor Jim Wood and Council member Kenny Lee. The data volume is shown to be 350 GB.
Emsisoft Threat Analyst Brett Callow told AFP that BianLian is a relatively new ransomware operation.
“Like other operations, they steal a copy of their targets’ data prior to encrypting the computers,” he said. “They then demand a ransom to delete the stolen data and provide a key to unlock the computers. If a victim doesn’t pay, the stolen data is released on the group’s site on the dark web.”
It is unknown whether they have locked Waynesboro out of any files or demanded a ransom.
The group targets organizations in all verticals across both the public and private sectors. The claim that they have accessed police data is of particular concern, Callow said.
“Some attacks on police departments have resulted in prosecutions being dropped due to lost evidence,” Callow said. “In one case, the hackers even threatened to release information about police informants to the people they were informing on.”
Callow said he does not have any information on who BianLian is or where they are based.
Acco ..
Support the originator by clicking the read the rest link below.
