Ransomware destroyed schools and cities in May

The ransomware caused major disruptions across the public sector in May, closing schools and hampering city emergency services.

See also: New Fog ransomware targets educational institutions

The widespread threat continued last month, following reports from multiple vendors of high levels of ransomware activity for 2023.Despite recent law enforcement efforts to disrupt the LockBit, the group claimed responsibility for several of the attacks in May that affected schools, cities, and healthcare organizations.

Ransomware gangs have been heavily targeting the education sector in the past month. Several cities, hospitals , and a U.S. public library have also reported attacks that caused significant outages and led to data breaches involving highly sensitive information.

Two such attacks occurred over Memorial Day weekend. Ransomware gangs typically target victim organizations during the holidays, when businesses are understaffed.

The Seattle Public Library revealed that it suffered a ransomware attack on May 25 that affected access to computers, its online catalog, e-book services and Wi-Fi network. The library, which has 27 locations across the state, took its systems offline due to the attack and contacted law enforcement.

See also: RansomHub exploits ZeroLogon in ransomware attacks

In a series of updates starting on May 28, the library said the attack occurred just a day before scheduled server that required a system shutdown. As of June 3, all locations are open, but online services, including account access and Wi-Fi, remain down.

Center Line Public Schools in Michigan also suffered a ransomware attack on May 25. The C&G reported that Center Line was forced to cancel classes due to the attack that affected the school's Wi-Fi, internet , security cameras and educational software. Center Line told the news outlet that students were still able to use Chromebooks and classes resumed on May 28. The investigation to determine whether there was a data breach remains ongoing.

On May 15, another Michigan-based school was also hit by ransomware. Fox 17 reported that students and staff at Rockford Public Schools discovered ransom notes on printers the morning of the attack. The attackers threatened to leak stolen data if the school did not pay an undisclosed ransom demand. Fox 17 said the attackers claimed theywere “not a politically motivated group” and promised to provide a decryptor once the ransom was paid. It also warned the school not to contact law enforcement.

See also: Linux version of TargetCompany ransomware targets VMware ESXi

Ransomware protection is an essential aspect of cybersecurity for individuals, schools, and organizations alike. This form of malware encrypts a victim’s files, demanding a ransom for the decryption key. Effective ransomware protection involves a multi-layered approach, including regular data backups, keeping software and systems updated, and using robust antivirus solutions. Additionally, educating users on how to recognize phishing attempts and suspicious links is crucial to preventing ransomware attacks. By implementing these measures, individuals and businesses can significantly reduce their risk of falling victim to ransomware.

Source: techtarget