US city rejects $5.3M ransom demand and restores encrypted files from backup

Re:US city rejects $5.3M ransom demand and restores encrypte... by warent on Thursday September 05, 2019 @06:19PM (#20891157)

Maybe they first had to verify the backups actually existed like they should and were up-to-date enough

[ Parent | on HN ]

Re:US city rejects $5.3M ransom demand and restores encrypte... by everybodyknows on Thursday September 05, 2019 @08:18PM (#20891873)

Indeed. I've worked at a big corp where it was belatedly discovered that backups were broken.

A second reason would be to give the attackers reason to pause, in case they somehow had a second bomb to throw, while IT hardened defenses:

>Since the attack, the city has installed additional security software and is developing new protocols.

[ Parent | on HN ]

Re:US city rejects $5.3M ransom demand and restores encrypte... by AnIdiotOnTheNet on Friday September 06, 2019 @09:20AM (#20895345)

> Indeed. I've worked at a big corp where it was belatedly discovered that backups were broken.

Ancient wisdom: If you don't test your backups then you don't have any backups.

[ Parent | on HN ]

Re:US city rejects $5.3M ransom demand and restores encrypte... by frankharv on Thursday September 05, 2019 @09:52PM (#20892330)

My thoughts exactly. I bet they did not have any backups for the Forth of July weekend so anyone doing city business that weekend may have to redo any paperwork or payments. Small price to pay to laugh at these clowns.

What exactly are the FBI doing about this. Perhaps if they got off their asses and quit investigating Presidential piss parties they could find this email recipient. How hard is it for the FBI/NSA to trace an email. They just want to cry about going dark instead. If foreign put a CIA hit on the computer terrorist.

[ Parent | on HN ]