Bitcoin Ransomware Takes Down 100 Romanian Hospitals Offline, Hackers Demand 3.5BTC
More than 100 hospitals in Romania were affected by a crypto ransomware attack on Tuesday, the National Cyber Security Directorate (DNSC) confirmed. The unidentified perpetrators have demanded 3.5 Bitcoin (BTC), or about $180,000, to decrypt the data.
The ransomware took down over 100 hospitals, affecting their IT systems and encrypting data, forcing the hospitals to operate offline.
Romania's ongoing hospital ransomware attack is getting worse. Cyber security centre said last night that 21 hospitals have had computers encrypted. A chidren's hospital was the first to get hit but now it's spread. Computers in 79 other medical facilities have been unplugged pic.twitter.com/rdsX31VhFd
— Joe Tidy (@joetidy) February 13, 2024
Per a recent update from the DNSC, 25 hospitals in Romania using Hipocrate Information System (HIS) are directly affected by the attack. “As a result of the attack, the system is down, files and databases are encrypted,” the Ministry of Health noted.
“The incident is under investigation by IT specialists, including cyber security experts from the National Cyber Security Directorate, and resumption possibilities are being assessed,” the Ministry added. However, it did not specify whether the authorities are ready to pay the ransom in Bitcoin, as demanded by attackers.
Dubbed ‘Backmydata’, the ransomware is a variant of Phobos malware family, that are distributed via hacked Remote Desktop (RDP) connections. The ransom note informs victim about the severity of the situation by threatening to sell confidential data if negotiations fail. The note also asserts that data can be returned only when the ransom is paid in digital assets.
Furthermore, hospitals in Romania are told to keep an eye on ransom demands to
Read more on cryptonews.com
