Ransomware gang apologizes for attack on children's hospital

Date:
Tue, 03 Jan 2023 10:51:28 +0000

Description:
LockBit apologizes for affiliate's ransomware attack on SickKids.ca and bans the culprits from its affiliate program.

FULL STORY ======================================================================

Rarely do we see cybercriminals engage in brand crisis management but its
2023 now and anythings possible.

An affiliate of the infamous LockBit ransomware -as-a-service program
recently attacked SickKids.ca - the Hospital for Sick Children.SickKids is a major pediatric teaching hospital located on University Avenue in Toronto, Canada, and Affiliated with the Faculty of Medicine of the University of Toronto.

During the attack, the threat actor managed to partially disable corporate systems, hospital phone lines, and the website. As a result, the hospital has had trouble receiving lab and imaging results, with the patients having to wait longer for their test results. Formal apology

Two days later, cybersecurity researcher Dominic Alvieri announced on Twitter that the group appeared to have formally apologized for the incident and said the threat actor violated its rules of engagement.

"We formally apologize for the attack on sikkids.ca and give back the decryptor for free, the partner who attacked this hospital violated our
rules, is blocked and is no longer in our affiliate program," the ransomware group said.

The decryptor seems to be a Linux/VMware ESXi decryptor, BleepingComputer explained, suggesting that the attack was targeted at virtual machines only. Read more

LockBit ransomware leaked online by angry developer

LockBit ransomware is spreading from compromised Microsoft Exchange

servers

These are the best malware removal software around

While cybercriminals might be unscrupulous in their quest for financial gain, some avoid certain industries, healthcare and critical infrastructure included. Even though it might sound like theyre doing it from the goodness
of their heart, its more likely that theyre looking to avoid the wrath of law enforcement.

After all, the incidents with Colonial Pipeline, JBS, and others, has drawn the attention of the highest legislators and law enforcement agencies to the dangers of ransomware, and resulted in the dismantling of some of the worlds biggest operations.

LockBit forbids its affiliates from encrypting endpoints whose operations are essential to patients lives, but allows stealing any data from healthcare organizations. These are the best firewalls right now

Via: BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/ransomware-gang-apologizes-for-attack-on-childr ens-hospital


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)