September 03, 2019
The Rise of Municipal Ransomware
America’s smallest cities and towns stand on the frontlines of cyber warfare.
Last month’s coordinated ransomware attacks against 23 cities in Texas reflect a troubling trend for America’s cities: bad actors are addicted to the payoff. In the 30 years since the first ransomware attack, the digital environment has changed beyond recognition, and it will only continue to mutate—by next year, approximately 30 billion devices will be connected to the Internet, and by 2025, almost 5 billion people will have access to the web. This presents an ever-growing opportunity for cybercriminals to wreak havoc—with local governments frequently in their crosshairs.
In the simplest terms, ransomware is malware that locks up data until the victim pays money to regain access. Established ransomware tactics involve holding a user’s data hostage for a few hundred dollars in Bitcoin. But attackers also make use of new ransomware strains like “Ryuk” and “SamSam” that target and infect entire organizations, and the demands for money increase exponentially. For instance, SamSam’s ransomware extortions average about $50,000 per attack. In August, a “single threat actor” likely compromised a managed-service provider—a company that manages numerous IT systems or services—to conduct attacks against Texas municipalities, demanding a collective 2.5 million dollars. But even after cities pay up, attackers may continue to target them and their insurers.
Read the full article in the Manhattan Institute's City Journal.
More from CNAS
-
Commentary
Indo-Pacific Security / Technology & National Security
Sharper: China's AI RiseArtificial intelligence has become a strategic priority for Beijing and Washington, yet both countries continue to pursue dramatically different strategies in their bid for gl...
By Charles Horn & Cadence Barker
-
Video
Technology & National Security
UN, Red Cross Call for Rules on Fully Autonomous WeaponsPaul Scharre, executive vice president at the Center for a New American Security, joins CNN to discuss the advent of fully autonomous weapons, the dangers of handing over targ...
By Paul Scharre
-
Commentary
Technology & National Security
Beneath the Surface: Overlooked Cyber Security ThreatsThis article was originally published in War on the Rocks. Cyber security remains a persistent concern for public and private sector organizations alike. Given the potential i...
By Caleb Withers
-
Commentary
Technology & National Security
Why Empowering Private Companies to Fight Cybercrime Had to HappenThere is no question that the government needs to adapt to the reality of the evolving civilianization of the security environment. It should do so boldly, quickly, but carefu...
By Gary Corn
