Cyber Attack Disrupts Indonesia’s National Data Centre
A cyber attacker has infiltrated Indonesia's national data centre, demanding a ransom of $8 million, according to the country's communications minister. This incident led to disruptions in government services, including at airports last week; however, automated systems are now operational again, as confirmed by the communications ministry.
Details of the Attack
The communications minister revealed that the attack was carried out using a new variant of ransomware known as Lockbit 3.0. This infamous cybercrime group is known for its ransomware tactics, which involve encrypting the victim's data and demanding a ransom, typically to be paid in cryptocurrency.
Ransomware Tactics
Ransom software like Lockbit 3.0 operates by encrypting crucial data. Hackers then offer a decryption key in exchange for a large payment. If the victim refuses to pay, they risk having their confidential information leaked or permanently deleted, significantly escalating the coercion tactics employed by cybercriminals.
Government Response
Digital forensics investigations are currently underway, as stated by an official from the communications ministry. Although specific details are yet to be uncovered, the authorities are actively pursuing more information about the incident.
Immediate Impact and Recovery
Among the disrupted services, airports experienced noticeable disturbances. Despite these challenges, the automated systems at the affected airports have been restored, ensuring a return to regular functionality.
Further insights into this incident and the ongoing investigation will be crucial in understanding and mitigating the risks of such cyber threats in the future.