Another hospital hit by ransomware in France, Spain’s public employment service hit with Ryuk, and China’s Cosco Shipping allegedly hacked by LORDBR
Another French hospital, Centre Hospitalier Général d’Oloron, has fallen victim to a ransomware attack. France Bleu reports (translation):
The Oloron Sainte-Marie hospital (Pyrénées-Atlantiques) was the victim of a cyberattack on Monday March 8 in the early afternoon. No application works and a message asking for a ransom of $ 50,000 to be transferred to a bitcoin account paralyzes the entire computer system. No network, external or internal, has been functioning since. A virus detected because all patient files were encrypted on all workstations, such as in the hospitals of Dax or Villefranche-sur-Saône, also victims of last February.
Read more on France Blue.
Meanwhile in Spain, Diego Larrouy and Carlos del Castillo report that Spain’s public employment system was attacked by what appears to be Ryuk ransomware (translation:)
The website of SEPE, the public employment system, is down this Tuesday as a result of a cyberattack that SEPE’s computer systems have received. Sources from the Ministry of Labor indicate that at the moment the origin is unknown and work is being done to raise the service.[…]
Although the origin of this cyber attack is unknown from Labor, SEPE employees have found that the aforementioned suspicious files had the name ‘Ryuk’. If confirmed, it would be a ransomware- type virus , characterized by encrypting the victim’s files, preventing access to them.
Read more on El Diario.
UPDATE 3:58 PM, March 9: The following report is now considered as “UNCONFIRMED” and “UNDER INVESTIGATION” because the original source reporting the attack was removed from Splash247.com without explanation. DataBreaches.net has sent an inquiry to Cosco and will update this when a response is received or more information becomes available:
And finally (for now, anyway), in other hacking-related news, Cosco Shipping, the world’s third largest container line, has had its email system compromised, allegedly by the Brazilian hacker known as LORDBR. Cosco Shipping is headquartered in China. MBW has the story.
Great thanks to @Chum1ng0 for sending these in.