Ransomware Hits Texas For Six

The Hackers who have struck a large number of local  government agencies acrossTexas with file-encrypting malware recently may have done it by compromising a managed service provider.  The attacker has now demanded a collective ransom of $2.5 million, the mayor of one municipality has said. 

The Texas Department of Information Resources (DIR) first  said on the 16th August that it was leading the response to a coordinated ransomware attack that had struck local governments across Texas. The number of local government entities in Texas affected by a ransomware attack has ow riseen to 23.

By planting malicious code inside agencies' information systems, digital intruders are able to exploit relatively unsophisticated or out-of-date cyber defenses and inhibit computer access. Affected users are then asked to pay a ransom, almost always in mostly untraceable bitcoin, to regain control of their systems. Whether Texas officials had been asked to do so was unknown. 

In 2016, global ransomware attempts rocketed to 638 million from just 4 million the year before, according to SonicWall, a  Californian network security firm.

Now the Department of Information Resources advises jurisdictions that have been impacted to contact their local Texas Department of Emergency Management Disaster District Coordinator. DIR says it’s committed to providing the resources necessary to bring affected entities “back online.”

The DIR says it is continuing to investigate the origin of the attack, and currently believes that the attack came from a "single threat actor." The agency says the State of Texas systems and networks have not been affected.

Elliot Sprehe, press secretary for the department, said theDIR was working to confirm which government entities are affected and said other information was still coming in. 

"It looks like we found out earlier today, but we’re not currently releasing who’s impacted due to security concerns,” he said.

KUT Austin:     TexasGov:    DallasNews:     Bleeping Computer:

You Might Also Read:

Florida Municipality Suffers Cyber Extortion:

Only In Texas: Ransomware Steals Data From Police:

 

« The EU's New Cybersecurity Certification Framework
Cyber Strategy & Cyber Security »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Securosis

Securosis

Securosis is an information security research and advisory firm dedicated to improving the practice of information security.

Jones Day

Jones Day

Jones Day is an international law firm based in the United States. Practice areas include Cybersecurity, Privacy & Data Protection.

SecureWorks

SecureWorks

SecureWorks provides intelligence-driven security solutions for organizations to prevent, detect, rapidly respond and predict cyberattacks.

Basis Technology

Basis Technology

Basis Technology provides software solutions for text analytics, information retrieval, digital forensics, and identity resolution.

Private Internet Access

Private Internet Access

Private Internet Access is a Virtual Private Network services provider offering secure encrypted access to the internet.

Optra Security

Optra Security

Optra Security specializes in information security with a focus on Application Security.

Eskive

Eskive

Eskive is a Brazilian cyber security awareness and education platform that empowers users and strengthens their company in the face of cyber threats.

ComoNExT Innovation Hub

ComoNExT Innovation Hub

ComoNExT is a Digital Innovation Hub and a startup incubator with a focus on the issues of digital transformation and Industry 4.0.

Cyber Security Courses

Cyber Security Courses

Cyber Security Courses was formed to help students in the UK find cyber security courses online.

Red Points

Red Points

Red Points protects your brand and content in the digital environment.

Wolverhampton Cyber Research Institute (WCRI)

Wolverhampton Cyber Research Institute (WCRI)

Wolverhampton Cyber Research Institute builds on the strength of its members in the area of network and communication security, artificial intelligence, big data and cyber physical systems.

ADL Consulting

ADL Consulting

ADL Consulting provide information security-related consultancy and training support to businesses across the UK. Our services include ISO27001, GDPR, Cyber Essentials and training.

Enea

Enea

Enea is one of the world’s leading specialists in software for telecommunications and cybersecurity. Our products are used to enable services for mobile subscribers, enterprise customers and IoT.

Corsearch

Corsearch

Combining AI-powered technology and decades of industry expertise, Corsearch is revolutionizing how companies establish and protect their brands.

Forward Global

Forward Global

Forward Global designs and delivers services and technologies to manage digital, economic, and information risks.

TELUS

TELUS

TELUS provide Canadian businesses with the services and solutions they need to securely thrive in a digital world. Partner with a cybersecurity leader you can rely on.