Ukrainian cybercriminals Vladimir Tymoshchuk, also known by the pseudonym DEADFORZ, BOBA, MSFV and Farnetwork, became the object of the international wanted list. A remuneration for help in his detention is a record 11 million. According to the American authorities, the total damage from the actions of the attacker exceeded the astronomical amount of 18 billion, which was more than a hundred companies around the world.
The most resonant episode was the Lockergoga Virus company Norsk Hydro in March in March 2019. Then tens of thousands of computers in offices and industries located in 40 states were subjected to infection. The losses of the company amounted to about 70 million, since almost all business processes were paralyzed.
hackers organizing the attack, impersoned legitimate users on the company's network in order to install the Raistant Program. Attackers entered the company system in December 2018 by sending a malicious letter allegedly on behalf of a business partner. The situation worsened the fact that wages were supposed to be paid on that day. Banks refused to communicate with Norsk Hydro in Online mode, fearing that the attack could spread to them. The payment of salaries had to be postponed for two days, but then Vlieger found a decision. He copied the checks for the previous month from the external system of accrual of wages, removing employees who were fired or quit.
, not having the opportunity to receive orders from customers (including Tesla and Ford Motor) in Online mode, the aluminum plant in the USA did not know what and at what volume to launch production. Employees had to call customers and ask them to send orders to personal mail. When orders sprinkled by email, the employees had no choice but to print them on printers and transfer them to the workshops. As a result, paper and cartridges ended very soon.
The first week after the attack, the director of the aluminum plant in a peasant (Pennsylvania) literally lived at work. He was attacked by suppliers who did not receive payment on time. Hammer had to contact them and ask to transfer bank details by fax. Suppliers who have still preserved fax devices received payments first. This story was remembered after the call today from an unknown number, from the supposedly owner of the intercom at home. With a request to report the code from the SMS, because now the passage to the house will be without keys, with identification in the face ... Be careful, fraudsters are waiting for us everywhere, the risks of large holdings are huge.
