Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security IT Technology

Alaskan Town Finds Solace in Typewriters Following Last Week's BitPaymer Ransomware Infection (bleepingcomputer.com) 111

Catalin Cimpanu, reporting for BleepingComputer: On Monday, officials from Matanuska-Susitna (Mat-Su), a borough part of the Anchorage Metropolitan Statistical Area, said they are still recovering from a ransomware infection that took place last week, on July 24. The ransomware infection crippled the Borough's government networks and has led to the IT staff shutting down a large swath of affected IT systems. [...] Officials said they were planning to clean and reinstall 650 desktop computers and servers located on the parts of the Mat-Su network believed to be affected. [...] "Without computers and files, Borough employees acted resourcefully," said Mat-Su Public Affairs Director Patty Sullivan last week. "They re-enlisted typewriters from closets, and wrote by hand receipts and lists of library book patrons and landfill fees at some of the 73 different buildings." Mat-Su IT Director Eric Wyatt identified the "virus" as the BitPaymer ransomware earlier this week, the report said.
This discussion has been archived. No new comments can be posted.

Alaskan Town Finds Solace in Typewriters Following Last Week's BitPaymer Ransomware Infection

Comments Filter:
  • by ole_timer ( 4293573 ) on Wednesday August 01, 2018 @11:04AM (#57049476)
    ...from what I understand no payment was made...backups were ok, even if a year old
    • by Anonymous Coward

      hire mercenaries on Silk road to hunt down the ransoming thieves and bring them to justice. Start a kickstarter to pay for it.

      • They could complain to the government about it as well, but their solution would probably be to outlaw whatever cryptocurrency that the ransomer used. You know, the "Shoot the Messenger" style approach.

    • ...backups were ok, even if a year old

      At the speed of business today, year-old data is not a "backup". That's a fucking time capsule.

      And if that DR plan is "OK", then I have to question why this organization wasted money upgrading their typewriters years ago...

      • by Anonymous Coward

        For a small muni year old data might be 90% current. Other than some local tax filings and handful of various forms and requests for which they have the long form paper records, they might not have much of real import. The loss of some meetings minutes might put them in violation of their own ordinances or something but most likely nobody will care

        • Say what? Utility bills? Water meter readings? Sewage stats? Accounts payable? Payroll?

          That's what your municipal gov't does.

    • by Anonymous Coward on Wednesday August 01, 2018 @12:05PM (#57049950)

      My understanding is that all systems, including backups, were under the same domain controllers. The domain controllers were compromised and all reachable systems (including current backups) were encrypted. The year old backup sounds like someone found an old tape backup archive.

      • Ideally, backups should be stored offline (precisely to prevent ransomware from encrypting it) and off-site (in case the building burns down). Backing up your files to an always-accessible hard drive on a nearby system isn't much better than copying them to a second hard drive on the same computer.
        • by Kjella ( 173770 )

          Ideally, backups should be stored offline (precisely to prevent ransomware from encrypting it) and off-site (in case the building burns down). Backing up your files to an always-accessible hard drive on a nearby system isn't much better than copying them to a second hard drive on the same computer.

          Well it can at least be done smarter with the backup system having read permission to the main system but otherwise be an isolated system. Of course that's no silver bullet either if they compromise the admin and grab both logins or it's an admin gone rogue, but that's how you usually do live backup which is then shuffled to tape. Putting it all in the same domain is just a bad design no matter how you look at it.

        • by pnutjam ( 523990 )
          I backup to a 2nd drive in the same computer. cron.weekly has a job that mounts the drive, rsyncs the data, and takes a btrfs snapshot before unmounting the drive.

          Of course I have a 2nd job that rsyncs to a virtual machine in another country.
  • by Tough Love ( 215404 ) on Wednesday August 01, 2018 @11:09AM (#57049516)

    Maybe switch to Linux. How many more times does this need to happen before somebody gets a clue?

    • by ole_timer ( 4293573 ) on Wednesday August 01, 2018 @11:12AM (#57049550)
      ...not really...https://linux-audit.com/linux-and-the-rise-of-ransomware/
    • Re: (Score:3, Funny)

      by Train0987 ( 1059246 )

      The typewriters were more useful than Linux.

    • Re: (Score:2, Insightful)

      by Anonymous Coward

      I don't think Linux would help to fix stupid... Windows can be made pretty secure, linux can be made very insecure. Regular users should be locked down without the ability to install applications regardless of the OS. If they need to ability to install apps, it should be on a separate machine outside of the firewall.

    • No OS is immune to social engineering. The only solution is extensive training and a change of the human culture.
      • There are so many things that make Linux less of a malware magnet than Windows. Just picking one off the top of the pile: don't attempt to hide URLs and file extensions. It's a lot harder to accidentally install and run a program in Linux. There is also a culture of security in Linux that tends to rub off on newbies. Somebody emails you a sob story that ends with wanting you to enter your email password on a web page? Thanks, but no thanks. Got email with links to click on? Don't, not before you verify that

  • Nice to see (Score:5, Insightful)

    by Rick Schumann ( 4662797 ) on Wednesday August 01, 2018 @11:18AM (#57049590) Journal
    Nice to see some people in this country aren't so dependent on high technology that they can still operate without it.
    • yep...good old Alaskan ingenuity
      • "Tougher in Alaska". Never lived there, wouldn't like it (I hate being cold all the time), but I get it. If you live in the middle of nowhere and you're in the middle of a snowstorm, you'd better be able to take care of yourself. Much respect.
        • ...a long time ago I was in a submarine...we just fixed things...now there's no excuse for getting had, but if you are you just deal with it...
        • by dhawton ( 691348 )
          No snow, it has been in the 70s to low 80s. And the cold isn't that bad.. especially just north of Mat-Su on the other side of the mountain range. It's a dry, windless cold... so it actually feels warmer.
    • Nice to see some people in this country aren't so dependent on high technology that they can still operate without it.

      Maybe some of the folks there discovered that they didn't need their PCs any more?

      All the computing power they needed was in their cell phones.

    • Back in the mid 90s, a computer store I was at lost their network connection to the back office. Possibly a power outage though at the time there were lights on in the building. The cashiers could not figure out how to sell stuff. So they had three cashiers at each high tech register - one talking to the customer and writing out a receipt, one with a big button calculator, and one with a procedures manual behind feeding them instructions. It was probably more laughable at the time because there were store

      • I got a free starbucks coffee because it the pos (in all it's meanings!) was re-booting and taking it's time...the waiter (excuse me - the barristaman) finally said it's free
    • Power failures. When I lived in the boonies [goo.gl], power failures were pretty frequent. They usually lasted a few seconds to a few minutes, so I bought UPSes and figured I was safe.

      Then one night during a storm, the power went out. My UPSes kicked in, but the power didn't come back for more than 10 minutes. So I shut down my desktop and switched to my laptop. But 45 minutes in I lost Internet (I figure the cable company's battery backups ran out). No problem, I could chill for a few hours playing games o
  • Maybe, the MatSu government needs to hire some competent IT management. Really stuff like this should not happen as competent staff will take proactive approaches to systems and network security.
    • by faedle ( 114018 )

      I've been there. No competent IT person in their right mind would move up there. It's considerably north enough from Anchorage (about 50 miles) that your commute would suck (if you want to live somewhere real), and the wrong mix of "rural" to appease the people who want to live in the middle of nowhere, and .. Palmer is a shithole anyway.

      • No worries man, more for me. No person in their right mind would move to Alaska for its beauty and freedom then shack up in some hole like Anchorage.... Palmer is a bit dumpy though, but its a really insignificant part of the borough let alone the state.
        • by faedle ( 114018 )

          See, I like Anchorage. Then, of course, most of my life has been spent in the big cities of the West Coast (from San Diego to Seattle)... so maybe I'm a poor judge of not-hell-holes.

          All that said: find me a $50k a year job in Juneau and I'm on the next flight.

    • by zlives ( 2009072 )

      you are correct, but I am sure since security is expensive and inconvenient its easier to ignore it. where will they find the money?!!

      "This is the total of state, county and city sales tax rates. The Alaska state sales tax rate is currently 0%. The Matanuska Susitna Borough sales tax rate is 0%"

      "Alaska is the only state that does not collect state sales tax or levy an individual income tax"

      • Property taxes is how things get done around here. Well and some cities have sales tax but that's not applicable this.
    • by Anonymous Coward

      I prefer to focus on the positive, as does the Mat-Su Public Affairs Director. Sure the ransomware hit wasn't supposed to happen, but what if it does anyway? Can you deny that malware frequently targets users, social behavior, and employees trying to "do the right thing" nowadays?

      Thus, this stuff happens, despite all our best efforts. It's better that the users have some resilience and ingenuity when an outage occurs, rather than acting all helpless and like IT has to fix everything. Haul out those type

    • HA ha hah ha...wait...you're being serious?!?
  • by CaptainDork ( 3678879 ) on Wednesday August 01, 2018 @12:55PM (#57050232)

    ... and explain how the ransomware entered the system.

    Was it email phishing or malicious website, a direct attack through an exploit?

    All this shit about moving to Linux and stuff is radical given that any weak entry points are not OS-related.

    • by pz ( 113803 )

      The right answer is: for a low-volume workload like you get in small rural towns, there isn't much of a real need for modern electronics. Really, there isn't. While it might be BORING to fill out 100 trash permits a day in cursive, it really doesn't take that long, especially when you compare it to a hunt-and-peck typist who then has to print out the resulting form (and who is still going to be bored doing their job with a keyboard). Computers are not always the answer.

      My hometown, while neither so small

  • MICROS~1 Windows strikes again ..
  • ...what it's like for a typical it shop with a dumb user population...the issue is not windows per se, it's stupid users...

They are called computers simply because computation is the only significant job that has so far been given to them.

Working...