Advertisement

Update | Chernobyl nuclear site hit by powerful ransomware cyber attack sweeping globe

The worldwide extortion scheme targeting Windows users began in Russia and Ukraine

Reading Time:5 minutes
Why you can trust SCMP
0
A dosimeter shows the radiation level near the Chernobyl nuclear power plant in Ukraine, in a file photo taken last year. Automatic monitoring systems at the disaster site were taken offline by a cyber attack that forced staff to check radiation levels with hand-held meters on Tuesday. Photo: EPA

A major global cyber attack on Tuesday disrupted computers at the Chernobyl nuclear site, Russia’s biggest oil company, Ukrainian banks and multinational firms with a virus similar to the ransomware that last month infected more than 300,000 computers.

The rapidly spreading cyber extortion campaign underscored growing concerns that businesses have failed to secure their networks from increasingly aggressive hackers, who have shown they are capable of shutting down critical infrastructure and crippling corporate and government networks.

It included code known as “Eternal Blue,” which cyber security experts widely believe was stolen from the US National Security Agency (NSA) and was also used in last month’s ransomware attack, named “WannaCry.”

“Cyber attacks can simply destroy us,” said Kevin Johnson, chief executive of cyber security firm Secure Ideas. “Companies are just not doing what they are supposed to do to fix the problem.”

The virus hit the radiation-monitoring at Ukraine’s shuttered Chernobyl power plant, site of the world’s worst nuclear accident, forcing it into manual operation. The station’s systems were turned off “due to the cyberattack”, said Ukraine’s agency in charge of the exclusion zone around the plant. A spokesman said employees now “go out and measure the (radiation) levels with hand-held meters.”

The ransomware virus crippled computers running Microsoft Corp’s Windows by encrypting hard drives and overwriting files, then demanded US$300 in bitcoin payments to restore access. More than 30 victims paid into the bitcoin account associated with the attack, according to a public ledger of transactions listed on blockchain.info.
A message demanding money is seen on a monitor of a payment terminal at a Kiev branch of Ukraine's state-owned bank Oschadbank on Tuesday after Ukrainian institutions were hit by a wave of cyber attacks. Photo: Reuters
A message demanding money is seen on a monitor of a payment terminal at a Kiev branch of Ukraine's state-owned bank Oschadbank on Tuesday after Ukrainian institutions were hit by a wave of cyber attacks. Photo: Reuters
Advertisement