Recent

Author Topic: Lockbit ransomeware attack  (Read 347 times)

0 Members and 1 Guest are viewing this topic.

Offline pspdfppdfxhd

  • Ninja Member
  • *
  • Posts: 3019
  • Gender: Male
  • Gender: undisclosed
Lockbit ransomeware attack
« on: September 22, 2021, 07:25:31 AM »
We've had the second lockbit attack in 3 weeks. It encrypts all the files on a server with a .lockbit extension and the hackers are hoping that you will pay the money to unlock your files. Payable in bitcoin I think. I see today that files are being copied back slowly on the server so the IT guy must have been working overnight to fix it from a cloud backup. Hard to say how much work we lost depending on what the date is on the backup coming back in. Seems to be sidestepping our virus/malware software. Not affecting Macs yet, maybe it can't. Not sure how it's getting in but one of our salespeople is suspect, perhaps downloading porn?

 :facepalm:

Offline Designia(o_O)

  • Sr. Member
  • ****
  • Posts: 250
Re: Lockbit ransomeware attack
« Reply #1 on: September 22, 2021, 09:23:04 AM »
Oh man that sucks

Offline Joe

  • Master of Nothing
  • Administrator
  • Ninja Warlord
  • *****
  • Posts: 38678
  • Gender: Male
    • B4Print.com
  • Gender: male
Re: Lockbit ransomeware attack
« Reply #2 on: September 22, 2021, 09:29:40 AM »
Sounds like the password on the server has been compromised. What is the software running on the server and version of Windows OS? Do you keep up with security updates? Since this is the second time it sounds like your IT guy didn't properly secure it after the first time.
Mac OS 11.5.2 Big Sur | Prinergy 9.0.1.125 | Adobe Creative Cloud 2021 | TWO Fuji CTP Units

I'm Sorry I Hurt Your Feelings When I Said You Were Stupid. I Honestly Thought You Already Knew

Offline david

  • WTF?
  • Global Moderator
  • Supreme Ninja
  • *****
  • Posts: 15725
  • Gender: Male
  • arrrrrrrggg....
  • Gender: genderless
Re: Lockbit ransomeware attack
« Reply #3 on: September 22, 2021, 09:34:41 AM »
either that or it's an inside job...

IT guy needs to make a caddy payment maybe?



 :spy2:
Prepress guy - doin' jobs one at a time
www.texasgraphics.com

Offline Joe

  • Master of Nothing
  • Administrator
  • Ninja Warlord
  • *****
  • Posts: 38678
  • Gender: Male
    • B4Print.com
  • Gender: male
Re: Lockbit ransomeware attack
« Reply #4 on: September 22, 2021, 09:39:34 AM »
Send this guy to have a word with the IT guy.

Mac OS 11.5.2 Big Sur | Prinergy 9.0.1.125 | Adobe Creative Cloud 2021 | TWO Fuji CTP Units

I'm Sorry I Hurt Your Feelings When I Said You Were Stupid. I Honestly Thought You Already Knew

Offline pspdfppdfxhd

  • Ninja Member
  • *
  • Posts: 3019
  • Gender: Male
  • Gender: undisclosed
Re: Lockbit ransomeware attack
« Reply #5 on: September 22, 2021, 12:00:02 PM »
We lost monday and tuesdays data..... lucky actually, could have been worse.

The good news is: I get paid by the hour!

Offline pspdfppdfxhd

  • Ninja Member
  • *
  • Posts: 3019
  • Gender: Male
  • Gender: undisclosed
Re: Lockbit ransomeware attack
« Reply #6 on: September 22, 2021, 12:01:25 PM »
Sounds like the password on the server has been compromised. What is the software running on the server and version of Windows OS? Do you keep up with security updates? Since this is the second time it sounds like your IT guy didn't properly secure it after the first time.

I don't know about IT and neither does anyone else here. If the IT guy goofed up, nobody would ever know.


 :drunk3: