Russian hackers breached Washington DC's police department database for a ransom, and threatened to share informants details with crime gangs, it is claimed.
The cybercriminals posted screenshots on their dark web site supporting their claim to have stolen more than 250 gigabytes of data as news of the hack emerged on Monday.
The District of Columbia's Metropolitan Police Department said in a statement that it had asked the FBI to investigate the 'unauthorized access.'
There was no indication that any police operations were affected, and the department did not immediately say whether it had been hit by ransomware.
A group of cybercriminals calling themselves Bubek claims to have hacked into the systems of the Washington, DC Metropolitan Police Department
The cybercriminals posted screenshots on their dark web site supporting their claim to have stolen more than 250 gigabytes of data
The DC Metro Police have asked the FBI to investigate. The chief of police, Robert Contee, is seen above at the US Capitol on April 2
The Babuk group, a relatively new ransomware gang, said on its website that it had 'downloaded a sufficient amount of information from your internal networks' and gave the police three days to contact it or 'we will start to contact gangs in order to drain the informants.'
Screenshots it posted suggested it has data from at least four computers, including intelligence reports, information on gang conflicts, the jail census and other administrative files.
One of the images, apparently of network locations accessed by the criminals, showed a text document on one computer entitled 'How To Restore Your Files.'
Such documents generally include instructions on how to contact the ransomware criminals, whose standard operating procedure is to exfiltrate sensitive data from networks they infiltrate as they sow malware that, once activated, encrypts data.
Only after receiving payment do the criminals provide software keys that unscramble the data.
So far this year, 26 government agencies in the US have been hit by ransomware, with cybercriminals releasing online data stolen from 16 of them, said ransomware analyst Brett Callow of the cybersecurity firm Emsisoft.
Ransomware victims don't always pay, often preferring the arduous task of rebuilding networks from backups.
The DC police department said it was taking the threat seriously.
So far this year, 26 government agencies in the US have been hit by ransomware, with cybercriminals releasing online data stolen from 16 of them, said ransomware analyst Brett Callow of the cybersecurity firm Emsisoft. The image above is a stock photo
'We are aware of unauthorized access on our server. While we determine the full impact and continue to review activity, we have engaged the FBI to fully investigate this matter,' the department statement said.
An FBI spokeswoman had no immediate comment.
A worsening global epidemic of ransomware attacks is considered a national security threat by many, doing tens of billions of dollars in damage.
US law enforcement is relatively powerless to counteract it as most of the criminals enjoy safe harbor in Russia and other nations with weak rule of law.
Post a Comment