Brain Cipher, the group responsible for hacking Indonesia's Provisional National Data Center (PDNS) and disrupting the country's services, appears to have apologized for the ransomware attack and given the government the decryption key.
See also: Brain Cipher: What do we know about the new ransomware?
This key was in the form of a 54 kb ESXi. Its effectiveness has not yet been confirmed.
In the statement, Brain Cipher clarified that it released the decryptor on its own, without prompting from law enforcement or other agencies. However, it asked for public gratitude for its magnanimous behavior – and even provided an account where it could receive donations.
The group also gave a motive – that it was acting as a penetration tester and that talks with the government had reached an impasse.
Cybercriminals had demanded a ransom of 131 billion rupiah ($8 million) to keep data, but the Indonesian government refused to pay.
The statement concludes: "We do not bargain."
See also: Heritage Valley Health System fined $950,000 for Ransomware attack
Brain Cipher clarified that while the Indonesian government may recover its data for free, not all victims treated the same.
“Honestly, this is very embarrassing for Kominfo and us as Indonesian citizens,” shared a cybersecurity influencer.
"Imagine, with a budget of Rp. 700 billion for Indonesia's data security, relying only on a security system with Windows Defender," he added.
Panic has gripped the government – especially as it emerged that backups were optional among the companies hit. Indonesian President Joko Widodo ordered an inspection of government data centres.
Both politicians and the public seem to be looking for a scapegoat – a petition calling for the resignation of Communications and Information Technology Minister Budi Arie Setiadi over the issue has garnered more than 18,000 signatures.
See also: Patelco Credit Union hit by ransomware attack
☁️ Keep safe copies with Proton Drive
Encrypted cloud storage from Proton — protect your files from ransomware, corruption, and data loss with end-to-end encryption.
- ✔ End-to-end encrypted files & backups
- ✔ Version history — recover files after ransomware
- ✔ Free space — sync across all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Ransomware attacks, such as that by the Brain Cipher group, have become a significant threat in the digital age, targeting both individuals and organizations. These attacks involve malicious software that encrypts the victim’s data, making it inaccessible until a ransom is paid. The consequences of such attacks can be devastating, leading to significant financial losses, operational disruptions, and damage to the victim’s reputation. Cybercriminals often exploit vulnerabilities in networks, employ phishing techniques , or use malicious attachments to deliver ransomware. With the increasing sophistication of these attacks, it is vital for entities to implement strong cybersecurity measures, including regular data backups , up-to-date antivirus software , and employee training to recognize potential threats.
Source: theregister
