Rhysida hackers dictate terms: cyber attack on Kuwait forced employees to work around the clock

CarderPlanet

Professional
Messages
2,556
Reputation
7
Reaction score
586
Points
83
Civil servants were waiting for their salaries, but hackers changed their plans.

The Government of Kuwait is restoring systems after a ransomware cyberattack that affected the country's Ministry of Finance.The attack began on September 18, and officials immediately attempted to isolate and disable the affected systems. The authorities sought to stave off concerns that workers would not be paid, emphasizing that the payment systems are in a separate network.

The Ministry of Finance of Kuwait reported that the National Cyber Center of the country (National Cyber Center) is working around the clock to solve the problem, and involved in the process of information security specialists, as well as representatives of other governments, whose names were not named.The Ministry confirmed that all data on civil servants salaries are stored in the agency's systems, and financial transactions are recorded. All government agencies continue to operate as usual.

On September 25, the hacker group Rhysida added the Ministry of Finance of Kuwait to its list of victims, giving the government 7 days to pay the ransom, the amount of which was not specified.

rw5ksyije2mtua9zisyyw5soqz3w1159.png

Post about hacking of the Ministry of Finance of Kuwait on the Rhysida website

Recall that the Rhysida group recently became known in the United States after a large-scale attack on Prospect Medical Holdings, which operates 16 hospitals in several states. As a result of the attack, the ambulance service was disrupted.

We also note that threat researchers from Check Point Research found tactical similarities between the Rhysida and Vice Society ransomware groups, and their targets in the education and health sectors. Experts have noticed that with an average degree of reliability, Vice Society operators are currently using the Rhysida ransomware program in their campaigns.

Earlier, we wrote that, according to a report by Palo Alto Networks Unit 42, the Vice Society group attacked 33 educational institutions in 2022 , which is more than other ransomware programs. Palo Alto Networks named Vice Society "one of the most influential ransomware groups of 2022." In total, the group targeted companies from the healthcare, government, manufacturing, retail, and legal services sectors.
 
Top