Cyber Risks · Krebs on Security

Ransomware at Colorado IT Provider Affects 100+ Dental Offices

Summary: A ransomware attack on Complete Technology Solutions, an Englewood, Colorado IT provider serving dental offices, deployed Sodinokibi (also called rEvil) on computers at more than 100 dentistry practices, beginning in the early morning hours of Monday, Nov. 25. CTS declined to pay an initial $700,000 ransom demand, and some affected offices received multiple ransom notes and encrypted file extensions, so a single decryption key unlocked only part of their files.

Why it matters: Black Talon Security CEO Gary Salman said one recovered network of 50 devices required more than 20 ransom notes to fully restore, and the attackers stand to collect far more than the $700,000 CTS refused to pay. The intrusion appears to have come through a remote administration tool CTS used to reach client systems without requiring client-side authentication.

Read the original at Krebs on Security ↗

Topics
Ransomware
Related