March 27th – The City of Atlanta is currently dealing with a ransomware attack. The systems are being held ransom for $51,000. The hack has been ongoing for six days. The systems infected had an effect on some of the city’s critical functions including residents unable to pay electric bills, city employees with no email or internet access, and police taking tickets down by hand. The WIFI has also been shut down at the Atlanta International Airport, the world’s busiest airport. Some sources are saying the ransomware to lock down the systems was SamSam, a tool commonly used in targeted attacks against US entities. NSA exploits leaked by the Shadow Brokers may have also been used to spread the ransomware. The sources claiming these details both on the ransomware and NSA exploits used are unconfirmed at this time.
Local news report on attack- https://www.wsbtv.com/news/local/atlanta/cyber-attack-against-city-of-atlanta-still-causing-problems/721971668
