Hackers attack San Francisco’s transit system, resulting in free rides

Hackers apparently breached San Francisco’s mass transit system over the holiday weekend, forcing the agency to shut down its light-rail ticketing machines and point-of-payment systems and allowing passengers to ride for free.

A message reading “You hacked. ALL data encrypted” appeared on ticket machines Saturday morning, along with a contact email address — suggesting a ransomware attack, in which a hacker can lock out a system from its owners. The San Francisco Municipal Transportation System, known as Muni, quickly shut down the payment system, opening its gates to passengers.
The system was restored by Sunday morning, according to Muni. The agency did not say how the situation was resolved.
The attack left Muni scrambling to discover the extent of damage, and whether any employee or passenger data had been breached. “At this point there are not any indications of any impacts to customers,” Muni spokesman Paul Rose told the San Francisco Chronicle on Sunday. “We’re doing a full investigation to find out exactly what we are dealing with.”
Among the chief concerns is whether the Clipper smart-card system was also breached. Muni is among 20 Bay Area transit agencies using Clipper cards for transit payments. The cards are used for about 800,000 fare payments a day, according to the Bay Area Metropolitan Transportation Commission, and many cardholders have their credit-card data on file.
The hack also raises disturbing questions about the digital security of America’s infrastructure and public safety; Muni trains are controlled by computers when they’re running in underground tunnels, although this weekend’s attack apparently did not access that system.
“I think it is terrifying,” one rider told KPIX 5 News on Saturday. “I really do I think if they can start doing this you know here, we’re not safe anywhere.”
Earlier this year, a Southern California hospital’s computer system was held hostage by ransomware for more than a week, before the hospital payed about $17,000 in bitcoin to the hackers.

German spy agency finds "striking increase" in Russian hacks

The BfV spy agency claims Russian hackers are trying to interfere with upcoming election

Germany's spy agency has seen a "striking increase" in the number of Russian-backed cyber attacks against the state and political parties, in what is considered a campaign to spread propaganda and misinformation ahead of next year's election.
The BfV spy organisation has identified a range of Russian tactics, including propaganda campaigns "using enormous funds to channel and spread disinformation", targeting Russian-speaking communities, political parties and leading decision makers.
"We see aggressive and increased cyber spying and cyber operations that could potentially endanger German government officials, members of parliament and employees of democratic parties," said Hans-Georg Maassen, head of the BfV spy agency.
Following claims of Russian interference during German elections last month, the agency now expects attacks to increase in an attempt to spread uncertainty and political distrust among the voting population as the country prepares for the 2017 federal election.
The attacks are believed to be an attempt to strengthen extremist groups, while "weakening or destabilising the Federal Republic of Germany", according to a BfV press statement.
Over recent months the agency has identified a significant increase in the number of 'spear-phishing' attacks against political parties within the German Parliament, perpetrated by Russian backed hacker group 'APT 28', also known as 'Fancy Bear'.
The group has also been responsible for a string of 'false-flag' attacks, in which "state authorities commit cyber attacks under the guise of pretend hacktivists", according to the BfV.
Last month Angela Merkel warned that Russian hacking groups were likely to try and interfere with the election process, after the group was blamed for an attack on the US Democrat National Committee, for meddling with the US presidential election, and an attack on the German Parliament in 2015.
Estonian Foreign Minister Sven Mikser expressed similar concerns on Thursday, regarding attacks against political institutions as an act of 'psychological warfare'.
"It's a pretty safe bet that they will try to do it again," said Mikser, speaking to Reuters. "They will try to surprise us. That's something that we should be very careful to look at and try to protect ourselves from."
Estonia has bulked up its cybersecurity after government websites were knocked offline in 2007, incidents which were blamed on Russian state sponsored hackers.
Russia continues to deny accusations of state sponsored hacking and any attempts to weaken the European Union, which has imposed strict economic sanctions against the country.