Cy­ber­at­tacks hit On­tario towns

on­tario po­lice warn of re­cent cy­ber­at­tacks tar­get­ing local gov­ern­ments

North Bay Nugget - - OPINION - Michelle McQuigge

a rash of cy­ber­at­tacks on on­tario mu­nic­i­pal gov­ern­ments in which hack­ers de­mand a ran­som to un­lock com­pro­mised sys­tems has prompted the pro­vin­cial po­lice force to warn about what it de­scribes as a re­cent trend.

on­tario pro­vin­cial po­lice didn’t dis­close how many mu­nic­i­pal­i­ties had been tem­po­rar­ily crip­pled by the in­ci­dents known as ran­somware at­tacks, but at least two re­cently had their sys­tems com­pro­mised and the mayor of one of them said he’s heard of mul­ti­ple other cases.

In an ad­vi­sory is­sued Fri­day, the opp said it wanted com­mu­ni­ties to be aware of the spate of in­ci­dents.

“In re­cent months there have been sev­eral ran­somware (hack/ virus) at­tacks on busi­nesses and mu­nic­i­pal gov­ern­ment of­fices within on­tario,” wrote the force, which did not re­spond to re­quests for fur­ther com­ment.

“the opp does not sup­port pay­ing ran­somware at­tack­ers, as it only en­cour­ages fur­ther crim­i­nal ac­tiv­ity, and there is no guar­an­tee that pay­ment will re­store the en­crypted data.”

po­lice de­scribed a ran­somware at­tack as one where a com­puter or net­work is in­fected with mal­ware — soft­ware in­tended to dam­age or dis­able — that en­crypts data on those sys­tems. those be­hind the at­tack then re­veal that the in­for­ma­tion can only be re­trieved with an en­cryp­tion key, which com­monly is only re­leased upon the pay­ment of a ran­som.

the opp said most such at­tacks are launched ei­ther through direct hack­ing into a vul­ner­a­ble sys­tem or through phish­ing emails that urge users to click on files or links that then in­stall the mal­ware. pay­ment is usu­ally de­manded in bit­coin or some other form of cryp­tocur­rency, the opp said.

that ex­act sce­nario played out ear­lier this month in mid­land, ont., ac­cord­ing to mayor gord Mckay.

on Sept. 1, of­fi­cials dis­cov­ered that many of the town’s servers had been com­pro­mised and locked down. Mckay did not dis­close ex­actly how much ran­som was paid through an in­sur­ance com­pany to the hack­ers, and said the cy­ber­at­tack re­mains un­der in­ves­ti­ga­tion.

Mckay said the at­tack crip­pled mid­land’s fi­nan­cial sys­tems, but said it was not as dev­as­tat­ing as it may have been had it hap­pened three months ago.

at that time, an­other ran­somware at­tack on the nearby town of Wasaga beach, ont., prompted mid­land’s of­fi­cials to take out in­sur­ance to pro­tect against such an in­ci­dent, he said.

“We took a good re­gard as to what hap­pened over there and said, ‘ok, no rea­son why it shouldn’t hap­pen here ... so let’s start taking pre­cau­tion­ary mea­sures,’ ” he said.

the town man­aged to iso­late on­line sys­tems re­lated to fire, po­lice, wa­ter and waste-wa­ter ser­vices be­fore the hack­ers struck, the mayor said. there’s also no ev­i­dence to sug­gest in­for­ma­tion on tax­a­tion, hu­man re­sources and other af­fected sys­tems was dis­sem­i­nated any­where af­ter the at­tack, he added.

of­fi­cials in Wasaga beach did not re­spond to re­quest for com­ment on the at­tack they ex­pe­ri­enced.

Mckay said the de­ci­sion to pur­chase in­sur­ance has proven ben­e­fi­cial and has helped the mu­nic­i­pal­ity re­cover faster than it might have oth­er­wise. ac­cess to the hacked sys­tems has been pro­vided over time, he said, and all the town’s sys­tems are ex­pected to be fully func­tional by next week.

the town’s ex­pe­ri­ence sug­gests an emerg­ing in­dus­try around cy­ber­at­tacks has taken root, Mckay said, adding he’s heard from mu­nic­i­pal­i­ties both inside and out­side of on­tario who’ve gone through a sim­i­lar or­deal.

“It’s hap­pen­ing a fair bit out there, but ob­vi­ously peo­ple don’t like to talk about it,” he said. “there’s an in­dus­try be­ing built up about it, both on the bad guys’ side and also on the re­cov­ery side.”

Jonathan hay­ward/THE CANA­DIAN PRESS

A rash of cy­ber­at­tacks on On­tario mu­nic­i­pal gov­ern­ments in which hack­ers de­mand a ran­som to un­lock com­pro­mised sys­tems has prompted the pro­vin­cial po­lice force to warn about what it de­scribes as a re­cent trend.

Newspapers in English

Newspapers from Canada

© PressReader. All rights reserved.