DC CCTV Cameras Knocked Offline by Ransomware
Posted by: Timothy Weaver on 01/31/2017 11:44 AM
[
Comments
]
A week before the presidential inauguration, the CCTV system in DC was knocked offline for three days by ransomware.
The security team worked to mitigate the intrusion and remove the malware while the system was offline. About 70% of the systems storage devices were affected. The system has 187 network video recorders and 125 of those were affected.
The ransom was not paid. The security team detached the devices, removed software and rebooted the system at each site.
“The less ransom that's paid, the less profitable ransomware will be for the criminals involved," Tim Erlin, senior director of IT security and risk strategy at Tripwire, said on Monday. "By now, it should be well understood that having functioning backups and a clear, efficient restore process are the best defenses against ransomware."
Erlin added that systems without backups are most vulnerable to ransomware. "Security doesn't just happen; it has to be designed into the system. As we connect more and more devices to the internet, we can expect attacks like ransomware to expand their footprint."
Source: SCMagazine
The security team worked to mitigate the intrusion and remove the malware while the system was offline. About 70% of the systems storage devices were affected. The system has 187 network video recorders and 125 of those were affected.The ransom was not paid. The security team detached the devices, removed software and rebooted the system at each site.
“The less ransom that's paid, the less profitable ransomware will be for the criminals involved," Tim Erlin, senior director of IT security and risk strategy at Tripwire, said on Monday. "By now, it should be well understood that having functioning backups and a clear, efficient restore process are the best defenses against ransomware."
Erlin added that systems without backups are most vulnerable to ransomware. "Security doesn't just happen; it has to be designed into the system. As we connect more and more devices to the internet, we can expect attacks like ransomware to expand their footprint."
Source: SCMagazine
Comments
