Skip to main content
News

Cyber News Rundown: Port of LA beset by wave of cyberattacks

Cyber News Rundown: Port of LA beset by wave of cyberattacks
Forum|alt.badge.img+7
  • Threat Research Analyst
  • 4 replies

One of the busiest ports in the world recently reported that they’ve experienced a sharp increase in the number of cyberattacks targeting them over the last two years. In that time they’ve averaged 40 attacks per month. In other cybersecurity news, T-Mobile reached a $350 million settlement after their 2021 breach.

Hackers breach decentralized music platform

Over the weekend, an unknown number of hackers were able to breach the internal servers of Audius, a decentralized music platform, and steal several million dollars' worth of AUDIO blockchain tokens. The hackers exploited a bug within the initialization code that allowed them to transfer over 18 million tokens from Audius’s community treasury into a privately owned blockchain wallet. The stolen tokens were later traded through Uniswap for a significantly lower value and then passed through a currency mixing service to make any additional tracking even more difficult.

T-Mobile reaches settlement in 2021 data breach

Following the 2021 data breach of T-Mobile that compromised the information for 80 million customers, the company has finally reached a settlement of $350 million.  Alongside the settlement, T-Mobile officials have promised to put another $150 million into improving their security measures over the next two years. The settlement covers all the class action cases that have stemmed from this attack and claim T-Mobile did little to prevent an incident like this and was only informed of the attack after the hacker began leaking the stolen data online.

Italian revenue agency falls victim to LockBit ransomware

Officials for the Italian Internal Revenue Service are investigating claims that LockBit ransomware successfully breached their networks and stole upwards of 100GB of data. While the LockBit group have given the victim until August 1 to pay the demanded ransom, the investigating law enforcement agencies have not been able to confirm any intrusions into the agency’s networks or clues that would point towards data being stolen.

Graff jeweler pays $7.5 million ransom

In response to the 2021 Conti ransomware attack on the British jeweler, Graff, the company has negotiated to pay the $7.5 million ransom to the Conti group to stop them from posting any stolen data on the company’s high-profile clientele. While the initial ransom was $15 million, the negotiations were successful in halving it, though Graff has now decided to sue their insurance provider for not taking care of the ransom payment.

Port of LA receives massive influx of cyberattacks

Officials for the Port of Los Angeles, one of the busiest ports in the world, have revealed that they have seen an increase in cyberattacks over the past 2 years, reaching 40 million identified attacks per month. While ransomware and spear phishing are the top types of attacks, the Port of LA must constantly stay ahead of all new types of cyberattacks, which are all aiming to disrupt international commerce and the flow of goods. Over the course of the pandemic, many ports and other critical infrastructure have become highly lucrative targets for various cyberattacks as they typically have lax security measures compared to other industries.

Did this help you find an answer to your question?

Forum|alt.badge.img+4

“Port of LA” Attacks: “Typically have lax security” indicates that the industry is currently below standards in their cybersecurity posture. Is that true, or was it really meant to be “historically lax security” indicating that in recent years they’ve upped their game?
 


tasystems
New Voice
Forum|alt.badge.img+8
  • New Voice
  • 156 replies
  • July 29, 2022

What I find incredible is that someone will pay 7.5 million dollars… and yet.. they get away with the money? EH? Am I missing something??? How do they get that sort of money out and away to be used in the real world!!!


Forum|alt.badge.img+4

For Context the Port of Los Angeles offloads 20 or so cargo ships daily, probably hitting ONE MILLION containers to be offloaded this year, Last year the value of the cargo passing through the port was $294 Billion.   The port operating revenue that year was $572 million, so paying out about 15% of one months billings is actually a pretty good deal…

 


tasystems
New Voice
Forum|alt.badge.img+8
gru_dyates wrote:

For Context the Port of Los Angeles offloads 20 or so cargo ships daily, probably hitting ONE MILLION containers to be offloaded this year, Last year the value of the cargo passing through the port was $294 Billion.   The port operating revenue that year was $572 million, so paying out about 15% of one months billings is actually a pretty good deal…

 

Makes you think… we spend money to protect people… and make a small margin… we create something to force people to pay money and can make millions! Now… I know there is something not quite right with this way of working… how come to good guys are on a pittance and the bad guys are the ones with the millions! CRAZY! :)


TylerM
Administrator
Forum|alt.badge.img+25
  • Sr. Security Analyst & Community Manager
  • 1272 replies
  • August 1, 2022
tasystems wrote:

What I find incredible is that someone will pay 7.5 million dollars… and yet.. they get away with the money? EH? Am I missing something??? How do they get that sort of money out and away to be used in the real world!!!

Cryptocurrency through non KYC (know your customer) exchanges and I’m sure use some mixers to try and stop any on chain analysis. Laundering crypto to cash has been and continues to be a criminals wet dream. FBI is catching some of them, but only then they are not careful (using KYC exchanges). It’s definitely a problem when it comes to discussions of widespread adoption of crypto. 


russell.harris
Popular Voice
Forum|alt.badge.img+5

So much money. Crazy


gmike
New Member
  • New Member
  • August 5, 2022

Always more interesting when higher profile targets come up in the news. Unfortunately, its targets like that that make people stand up and notice. Us lowly IT folks are fully aware (thanks Webroot!) of the dangers that exist, but we need everyone (especially the ones that hold the purse strings) to understand the risks and do what’s necessary to manage them.