Bitcoin extortionists attack Argentina’s immigration service

Hackers disrupted Argentina’s National Migration Service (DNM) and demanded $4 million in Bitcoin. The report comes from Bleeping Computer.

Early on August 27, Argentina’s cybersecurity service received complaints from border control staff. They claimed they had lost access to many Microsoft services and shared folders.

Initially, the attackers demanded $2 million in Bitcoin for a decryptor tool and the deletion of stolen data. After a week, the amount rose to $4 million (around 355 BTC at the time).

In a Tor payment page seen by BleepingComputer, Netwalker originally demanded $2 million for a decryptor the and deletion of stolen files. After seven days, this amount increased to $4 million. pic.twitter.com/CTmjPHshVv

— BleepingComputer (@BleepinComputer) September 6, 2020

As a result of the attack, the migration service had to shut down central servers and suspend operations at border crossings for four hours. The DNM leadership refused to engage in negotiations with the hackers.

Later, cybersecurity experts determined that the servers were attacked by NetWalker. This same group in June received $1.14 million from the University of California for unlocking encrypted information.

Earlier, unknown attackers demanded 1.990364 BTC from the government of Saratov Oblast. The threat of an explosion, mentioned in the letter, did not materialise.

Subscribe to ForkLog news on Facebook!