Indonesian government experiences ransomware attack
Kominfo, Indonesia's Ministry of Information Communication and Technology, reported that a Temporary National Data Center (PDNS) had been affected by ransomware since 20 June 2024, causing several cloud-based public services including immigration services to be disrupted.
The National Cyber and Password Agency (BSSN) head, Hinsa Siburian said that BSSN discovered that the security features of Windows Defender had been deactivated on June 17, 2024. Malicious activities began on June 20, including the installation of malicious files, deleting of important file systems, and the disabling of active services.
Files related to storage, such as: VSS, HyperV Volume, VirtualDisk, and Veaam vPower NFS stopped working or crashed. Investigations are under way, though somewhat hampered by encryption of files from the ransomware, Brain Cipher from Lockbit.
"This becomes important for lessons learned and mitigation efforts so that similar incidents do not happen again," said Hinsa in Bahasa Indonesia.
As of 24 June 2024, immigration services are operating normally. These include Visa and Residence Permit Services, Immigration Check Point Services (TPI), Passport Services, Visa on Arrival (VOA) Services on boarding, and Immigration Document Management Services.
Comments
Post a Comment