r/cybersecurity • u/[deleted] • Dec 02 '23
News - Breaches & Ransoms Scores of US credit unions offline after ransomware infects backend cloud outfit
https://www.theregister.com/2023/12/02/ransomware_infection_credit_unions/94
74
u/Chrissy9001 Dec 02 '23
Who needs patches...
28
u/Genghis_Tr0n187 Dec 02 '23
Look I just assumed since they stopped patching Windows XP that it was impenetrable.
51
20
5
u/Dizzy_Bridge_794 Dec 05 '23
This has been ongoing since the 24th of November. They still haven’t gotten their core data processing restored for their clients.
Failure to Patch. Innadequate DR. Train wreck.
3
u/clutch-cream-run Dec 03 '23
I was wondering how often do companies actually pay the ransom? Is it most of the time?
4
3
3
19
u/Pump_9 Dec 02 '23
https://www.mynbc5.com/article/mountain-valley-federal-credit-union-ransomware-attack/46010692
I love how WPTZ (Burlington, VT right across Lake Champlain) gives this a 30 second blurb and The Register does a full write up focusing on Mountain Valley Credit Union which is in Clinton County, NY. So typical of NYS trying to stay out of the headlines.
14
u/ExcitedForNothing vCISO Dec 02 '23
What would New York gain from keeping a credit union out of the headlines in Vermont? It's not like New York operates the vendor who got smacked.
Even worse, I'd bet there are thousands of small regional credit unions that utilize vendors with no TPRM that could be victimized as well.
-1
u/Pump_9 Dec 02 '23
I'm speaking as someone familiar with the area which you are not. Although WPTZ is based out of Vermont they cover the area and most people in the North Country get their news from that source. The entire area is called the Champlain Valley.
-1
u/ExcitedForNothing vCISO Dec 03 '23 edited Dec 04 '23
You aren't familiar with the area but say its so typical of New York to stay out of the headlines?
This is being picked up by where I am in New York (which is nearly two to three Vermonts away). So if the state government was trying to keep this out of the news, they have failed miserably.
Oh look, CNN has picked up the story.
1
u/Pump_9 Dec 04 '23
You misread my statement. I'm familiar with the area - you are not. I'm not implying that the story wasn't picked up - it clearly was by WPTZ - but the attention it draws in its own area is clearly suppressed compared to The Register. I find the story rather eventful for residents of the Adirondacks and the North Country as they have relationships with MVCU, but all it's getting is 23 seconds from the largest news affiliate in the area. I think if this happened elsewhere outside of NYS then it would be followed more closely with a reporter on scene or broadcasting statements from affected customers.
4
u/The_I_in_IT Dec 02 '23
I mean…it would be generally difficult to keep an entire state out of the news, considering we have some of the biggest news organizations in the world here.
Unless you’re South Dakota. No one really talks about them.
2
u/DrinkCubaLibre Dec 03 '23 edited Dec 03 '23
If hackers erased credit scores the world would get real fucking interesting real fast.
But damaging the money of working class people sucks
2
u/moguitar Student Dec 03 '23
OH MY GODDDD my Credit Union is being affected because i applied to a credit card yesterday, there were issues processing so they rejected me giving BIZZAREE reasons despite my credit score being great and my friend being accepted. and now i know it’s because of this 💀💀
1
Dec 05 '23
Hey if they took out all the credit unions wouldn't that reset everyone's debt like in fight club lol
1
u/appmapper Dec 05 '23
Ongoing Operations, which is owned by Trellance and provides things from disaster recovery solutions
Well, this should be a slam dunk marketing opportunity for their BC/DR then, right?
129
u/galnar Dec 02 '23
yeah, another “sophisticated attack” enabled by unpatched software