Security Affairs
PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|PaperCut Zero-Day Under Active Attack: Emergency Patch Released|U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog|Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

Wiregrass Electric Cooperative hit by a ransomware attack

Wiregrass Electric Cooperative, a rural Alabama electric cooperative was hit by a ransomware attack. Wiregrass Electric Cooperative, a rural Alabama electric cooperative that serves about 25,000 members, was hit by a ransomware attack. The cyberattack temporarily blocked the customers’ access to their account information, the cooperative is working to restore the impacted system. According to […]

Reynolds ransomware uses BYOVD to disable security before encryption ransomware

Wiregrass Electric Cooperative, a rural Alabama electric cooperative was hit by a ransomware attack.

Wiregrass Electric Cooperative, a rural Alabama electric cooperative that serves about 25,000 members, was hit by a ransomware attack.

The cyberattack temporarily blocked the customers’ access to their account information, the cooperative is working to restore the impacted system.

According to the operating chief officer Brad Kimbro, Wiregrass Electric Cooperative did not pay the ransom demanded. Kimbro said that the cooperative did not suffer a data breach and the provision of the electrical service was not impacted. Kimbro also added that the personnel at the utility discovered the security breach on Saturday morning and only one server was impacted.

The cooperative was upgrading its computer systems last week before the attack.

“We at Wiregrass Electric Cooperative hold member information in the highest regard, and we always do everything we can to protect our members’ information,” Brad Kimbro, WEC’s chief operating officer, said via a news release. “We are thankful that no information has been accessed during this event.”

The organization took off-line the member account information and payment systems as a precaution.

“Our IT guys spent all weekend out of an abundance of caution looking at every server, every laptop, every computer, everything,” Kimbro said.

The IT staff worked over the weekend to restore access to the website, however, customers could still face problems while accessing the site.

“Out of abundance of caution, WEC is conducting system maintenance following the attack. The system maintenance prevents members from accessing their accounts and any payment systems.” reported the Dothan Eagle website. “Disconnects of prepay accounts that reach a zero balance will be suspended during the maintenance period.”

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″][adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, ransomware)

[adrotate banner=”5″]

[adrotate banner=”13″]