The City of Stuart in Florida gets infected with Ryuk ransomware
- Attackers infected the Stuart city servers and computers with the Ryuk ransomware forcing the city to shut down its servers.
- City services such as payroll, utilities, and budgeting have been restored to normal operations.
What is the issue - Attackers infected the Stuart city servers and computers with the Ryuk ransomware forcing the city to shut down its servers.
On April 13, 2019, attackers targeted the city of Stuart with a ransomware attack, infecting the city’s servers and forcing them offline. Upon learning the incident, the city conducted investigations and found out that the ransomware is Ryuk.
- City manager David Dyess after the Monday's meeting said that the FBI is investigating the ransomware attack and that it might take 7-10 days to recover the entire city services.
- However, city services such as payroll, utilities, and budgeting have been restored to normal operations.
- Emails services, police, and fire departments are still offline.
Dyess said that a brute-force attack is not the primary attack vector but phishing email scam.
“If it was on one of the servers where they got what’s called a remote desktop protocol … I would say it was brute-force, but it’s not. It’s on a regular desktop computer that doesn’t have outside connectivity. So, more than likely it’s going to be a phishing email-type scam, where it’s like ‘click on this email,” Dyess said, TCPalm reported.