Garmin Being Held for Ransom

[Chotu]

https://www.forbes.com/sites/barryco...ay-outage/amp/

[SaylorMade]

Garmin.... not Harmon

Anyways - ouch

[Chotu]

Originally Posted by SaylorMade

Garmin.... not Harmon

Anyways - ouch

Damn typos. Ugh. Too late to edit the title

[Snore]

OUCH!

Someone will be starting a new career soon....

[SaylorMade]

Originally Posted by Snore

OUCH!

Someone will be starting a new career soon....

Or started one already.... I suspect this has to have been some kind of inside job to do so much damage.

[Brian.D]

Wipe the harddrive. Reinstate the data from the daily backup. No monies lost. You now, if companies would only spend a little more money on an isolated backup system these ransomware hacks would be moot.

[SaylorMade]

Originally Posted by Brian.D

Wipe the harddrive. Reinstate the data from the daily backup. No monies lost. You now, if companies would only spend a little more money on an isolated backup system these ransomware hacks would be moot.

That's why I suspect that they had someone on the inside, who was trusted, and able to destroy the restore ability beforehand.

We will probably never get the full story, sadly enough, because thats the only way to learn.

[a64pilot]

If you can pay them, they can be tracked, if they can be tracked they can be arrested.
Assumption is there are treaties with everyone to cover extradition, one would assume even N Korea?
If not than isn’t there why we have a UN?

[IslandInfedel]

Originally Posted by a64pilot

If you can pay them, they can be tracked, if they can be tracked they can be arrested.
Assumption is there are treaties with everyone to cover extradition, one would assume even N Korea?
If not than isn’t there why we have a UN?

Depends, if it’s crypto that might be hard

Or if they are located somewhere that doesn’t care, or doesn’t care so long as they get a cut.


I’d say call it a excuse for a website redesign, and point your DNS to a fresh new server.

[SaylorMade]

Originally Posted by a64pilot

If you can pay them, they can be tracked, if they can be tracked they can be arrested.
Assumption is there are treaties with everyone to cover extradition, one would assume even N Korea?
If not than isn’t there why we have a UN?

They are not accepting dollars or major credit cards

[B23iL23]

I'm in the cybersec business and I bet you $100 it was not someone on the inside. Ransomware like this is usually delivered in an email and when run (like simply opening a PDF attached in an email), it finds every drive and folder and encrypts it.

I've seen this over and over where the business have the backups as shared folders (for easy access) and these also get taken out. Same with the website.

They will either have to use an offline backup (if they have one) or pay up. There are no other alternatives. And to those that think they can be traced when you pay, 90% of the time they get away with it.

Originally Posted by SaylorMade

That's why I suspect that they had someone on the inside, who was trusted, and able to destroy the restore ability beforehand.

We will probably never get the full story, sadly enough, because thats the only way to learn.

[a64pilot]

I don’t care what it is, it can be traced, trust me.
You think your slick and secure, but you think is was thought about and defeated 20 years ago, the question is if the assets are worth disclosing for your problem.

30 years ago listening to conversations by measuring window vibrations with a laser from miles away was probably high tech, but that kind of stuff hasn’t been for a long time.

I’m certain that there is no way to transfer money that can’t be traced if it’s considered to be a National security issue.

[Scott Berg]

Im' with B23iL23; also a veteran of the cyber security world... as amazing as it is there are probably no good backups; this sort of thing was embedded and then activated. It's the world we live in...

[B23iL23]

It's not money - it's bitcoin. While the US/Canada/Europe have strict controls on how you can turn bitcoin into cash, many countries do not. Garmin end up purchasing BC, then transfer this to the ransomware bitcoin account (which is untraceable because that's the idea of the blockchain that BC is built on).

The BC can then be turned into cash somewhere in the world. It's happening every day and they are getting away with it.

Originally Posted by a64pilot

I don’t care what it is, it can be traced, trust me.
You think your slick and secure, but you think is was thought about and defeated 20 years ago, the question is if the assets are worth disclosing for your problem.

30 years ago listening to conversations by measuring window vibrations with a laser from mikes away was probably high tech, but that kind of stuff hasn’t been for a long time.

I’m certain that there is no way to transfer money that can’t be traced if it’s considered to be a National security issue.

[SaylorMade]

I guess Garmin is just gonna recruite their new IT guys in this thread ...

Everyone knows how it is delivered, that is not the point in regards to having inside assistance.

Loved the idea of just creating a new DNS route though, why didn't they already think of that