Atlanta, Hit by Ransomware Attack, Also Fell Victim To Leaked NSA Exploits (zdnet.com)
Zack Whittaker, reporting for ZDNet: It's been almost a week since the City of Atlanta was hit by a ransomware attack, which encrypted city data and led to the shutdown of some services. Mayor Keisha Lance Bottoms said in a press conference Monday that the city's government is working on recovering the network after ransom notes appeared on computer displays on Thursday afternoon. The city has hired local cybersecurity firm SecureWorks to assess the situation. Reports say the notorious SamSam ransomware was used in the Atlanta attack, which exploits a deserialization vulnerability in Java-based servers.
[...] But according to one security firm, last week's cyberattack was not a surprise because the city had fallen victim to leaked government exploits used in the WannaCry outbreak. New data provided by Augusta, Ga.-based cybersecurity firm Rendition Infosec, seen by ZDNet, shows that the city's network was silently infected last year with leaked exploits developed by the National Security Agency. The cybersecurity firm's founder Jake Williams said at least five internet-facing city servers were infected with the NSA-developed DoublePulsar backdoor in late April to early May 2017. That was more than a month after Microsoft released critical patches for the exploits and urged users to install.
[...] But according to one security firm, last week's cyberattack was not a surprise because the city had fallen victim to leaked government exploits used in the WannaCry outbreak. New data provided by Augusta, Ga.-based cybersecurity firm Rendition Infosec, seen by ZDNet, shows that the city's network was silently infected last year with leaked exploits developed by the National Security Agency. The cybersecurity firm's founder Jake Williams said at least five internet-facing city servers were infected with the NSA-developed DoublePulsar backdoor in late April to early May 2017. That was more than a month after Microsoft released critical patches for the exploits and urged users to install.
So while the NSA also failed to keep citizens safe it now is shown to have directly contributed to an attack on its own government.
Well done!
No doubt, this vicious attack was yet another dirty Russian active measure.
Time to kerb-stomp these fascist assholes. Because they're not taking a hint, and they're doubling down on their insane, suicidal aggression against the West.
. . . or we re-name all the streets "Peachttree". . .
Oops, too late. . . (grin)
The government didn’t want to invest into a modern/proper IT infrastructure.
I am sure such changes were brought up, but was probably rejected due to not solving an immediate problem at hand, or gone with the lowest cost budget because they didn’t want to hear the tech talk.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
As a longtime resident of Atlanta (almost 30 years), I can say the incompetence and corruption of the Atlanta city government is well known around here. The higher up people are mostly political cronies who have no idea what they're doing.
Not to impugn the character of the rank-and-file IT workers. No doubt they're doing the best they can with what little the city gives them to work with. If an investigation were launched -- and it never will be -- I have little doubt it would find IT has been screaming for funds to get proper security and backups implemented and those screams have been ignored. Why spend money on IT security when you can spend it on a worthless streetcar system nobody uses? Or perhaps an entertainment venue in the middle of a crime-ridden area nobody wanted to go to? Or how about a mini-golf "fun park" nobody wanted to visit in downtown Atlanta?
All these fiascos were paid for in whole or in part by Atlanta taxpayers and always seemed to get built and run by people really friendly with Atlanta politicians. Nah, no corruption to see here folks. Move along and keep electing the same morons every time the elections come along.
In the end they will lay their freedom at our feet and say to us, Make us your slaves, but feed us. - Fyodor Dostoyevsky
NSA!
Go NSA!
Go NSA!
Go NSA!
Go NSA!
Go NSA!
aaaaaaa
Damn, Atlanta. You seem to never learn. How about hiring some proven professional network admins that actually setup an optimized server and network security?
I climax harder and longer ever since I've read leaks about special software from our heroes.
No sarcasm here. USA #1!
Atlanta is 500K people surrounded by 5M people. A few of the surrounding govts aren't inept and full of wealth-redistribution plans.
Most people in metro Atlanta aren't impacted by the govt incompetence that happens ITP ("inside the loop" for the unfamiliar people).
With all those sideloading attacks, can't they just exploit Spectre or Meltdown and circumvent the encryption Or there is no PoC code yet?
is how the new Mayor's name is a command. "Keisha, lance bottoms." She should have been a nurse.
After this shitstorm, I think it'd be better if she was Mayor Soiled Bottoms...
Having a mayor named Keisha would really instill me with confidence. But then again you have to look at the demographics of the city.
Only the State obtains its revenue by coercion. - Murray Rothbard
oh, snap, BITCH
The great wall seems to have kept all the Mexicans out. Job well done.
So is that NSA cock in your mouth more of a salty or a meaty taste?
No joke.
The NSA created the tools.
The NSA allowed them to be stolen by hackers and used.
The NSA should be held responsible for the damage they do.
I do hope Atlanta sues them, makes their case to the press.
Or forces them to help break the encryption and put out the fire.