Governance
Indonesia recovers data after major ransomware attack
Indonesia is recovering data from a major ransomware attack affecting over 160 government agencies, the attackers initially demanded ＄8 million, then he gave away the key for free.
Headline
Indonesia is recovering data from a major ransomware attack affecting over 160 government agencies, the attackers initially demanded ＄8 million, then he gave away the key for free.
Context
OUR TAKE The recent ransomware attack on Indonesia’s government highlights cybersecurity vulnerabilities. Brain Cipher’s release of the decryption key, claiming to raise awareness, is met with skepticism. The public suspect ulterior motives. At the same time, This incident stresses the need for robust cybersecurity and proper data backups. –Jasmine Zhang, BTW reporter Indonesia is recovering data from a significant ransomware attack that impacted over 160 government agencies last month. The attackers, known as Brain Cipher , demanded $8 million in ransom but later released the decryption key for free, as reported by StealthMole , a Singapore-based cybersecurity firm. They stated their aim was to highlight the importance of cybersecurity funding and hiring qualified specialists rather than for political motives.
Evidence
Pending intelligence enrichment.
Analysis
The attack disrupted various government services, including immigration and major airports, highlighting a lack of data backups. Chief Security Minister Hadi Tjahjanto announced that data for 30 public services across 12 ministries has been recovered using a “decryption strategy,” though it’s unclear if the government’s method involved Brain Cipher’s decryption key. Ransomware like Lockbit 3.0 was used in the attack, which encrypts data and demands payment for restoration. Also read: Several Macau government websites hacked
Key Points
- Indonesia is recovering data from a major ransomware attack affecting over 160 government agencies, the attackers initially demanded $8 million, then they gave away the key for free.
- The attack, using Lockbit 3.0, disrupted multiple services, including immigration and major airports, and highlighted the lack of data backups.
Actions
Pending intelligence enrichment.
