Warning after theatre site hack

INTERNATIONAL HACKERS have increasingly begun targeting New Zealand business websites, with even the Auckland Theatre Company subject to virtual hostage-taking.

Sunday Star-Times understands that overseas hackers took over the ATC website (www.atc.co.nz) in December, preventing access by members of the public, then sent theatre staff a menacing email.

The cybercriminals demanded thousands of dollars upfront, and thousands more monthly, to release their virtual hostage.

ATC, through communications manager Michael Adams, declined to answer questions about the incident but issued a brief statement saying ‘‘the company IT system was running as normal by the afternoon’’.

Sources close to ATC said fleeting consideration was given to paying the demand, before sense prevailed. ‘‘We did consider it, but not for very long,’’ the source said.

Resolving the issue required reinstalling an older version of the website, and the matter was reported to police.

Former InternetNZ chief executive Vikram Kumar said such attacks were on the increase.

‘‘We’re beginning to call this a denial of business attack – it’s becoming more and more common, and far more sophisticated,’’ he said.

Kumar said many small organisations – bereft of specialised IT departments or established relationships with authorities – were often left at a loss over how to respond.

‘‘The biggest problem small organisations have is really there is nowhere to turn to,’’ he said.

‘‘Unfortunately many, many people in these circumstances shut down their website and give up on the internet – or pay up. This is extortion of the internet age.’’

Kumar commended ATC on refusing to pay and contacting police.

Catherine Bingley of Security Systems concurred that such attacks were on the increase.

‘‘It does happen. I’ve heard it happening more to industry – rather than non-profit organisations like ATC – which really makes these guys the scummiest of the scummy,’’ she said.