Security Affairs
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

A ransomware attack disrupted the IT network of the City of Liege

Belgium city of Liege has suffered today a ransomware attack that has disrupted the IT network of the municipality and its online services. Liege, one of the biggest cities in Belgium, was hit by a ransomware attack that has disrupted the IT network of the municipality and its online services. “The City of Liège is […]

Reynolds ransomware uses BYOVD to disable security before encryption ransomware

Belgium city of Liege has suffered today a ransomware attack that has disrupted the IT network of the municipality and its online services.

Liege, one of the biggest cities in Belgium, was hit by a ransomware attack that has disrupted the IT network of the municipality and its online services.

“The City of Liège is currently the victim of a large-scale targeted computer attack, obviously of a criminal nature.” reads the status page published by the city. “The City of Liège, surrounded by experts of international competence, analyzes the scale of this attack and its consequences, in particular in terms of duration on the partial unavailability of its IT system. It is doing everything to restore the situation as soon as possible. Services to the public are currently heavily impacted.”

In response to the attack, IT staff shut down its network to avoid the malware from spreading.

To avoid propagation to its entire network, staff were instructed not to turn on a computer in the office.

The City of Liège launched an investigation into the attack with the help of international security experts and is currently working to restore the operations.

“The precise list will be provided as soon as possible in order to avoid any unnecessary travel,” the City said in a press release. “Citizens who show up for their meeting will be personally informed of the procedure to follow to set up a new meeting,”

At the time of this writing, the experts have yet to determine the extent of the cyber attacks and it is not clear if threat actors have stolen City’s data.

Belgian media speculate the involvement of the Ryuk ransomware gang citing a source informed about the event.

“The City of Liège, whose computer system has experienced a serious failure since Monday morning, is the target of a ransom demand via ransomware named “Ryuk”. This is what we learned from a good source, a few hours after the observation of this computer failure, which affects many services, such as the civil registry and district town halls.” reported RTC Tele Liege.

Unfortunately, attacks against municipalities are becoming very frequent, in the US we observed a long string of ransomware attacks targeting municipalities of various sizes. The list of targeted municipalities includes City of Tulsa,City of Saint John, AlbanyAtlantaBaltimoreFlorenceKnoxvilleLafayette, New Orleans, and more.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, city of Liege)

[adrotate banner=”5″]

[adrotate banner=”13″]