The hacking-related paralysis of Fulton County’s authorities, a minimum of, appears to be very actual: By its personal admission, the county authorities is dealing with a critical and ongoing community disruption that appears very very similar to a ransomware assault. The web site for Fulton County’s authorities has famous in an alert on its homepage for almost per week that it is “experiencing an surprising IT outage at the moment affecting a number of programs” and that programs associated to all the things from telephone traces to tax assortment to courts had been affected. An official who answered the telephone at the county’s publicly listed telephone line tells WIRED the outage had begun as early as late January. But a county authorities spokesperson declined WIRED’s request for extra info on the assault.
The LockBit hackers additionally posted some convincing pattern paperwork that appeared to have been stolen from the Fulton County courtroom programs previous to the takedown final week, based on Georgia-based reporter George Chidi, who wrote about the incident earlier this month. Chidi reported seeing paperwork that included courtroom recordsdata and even paperwork below seal in particular instances, although none seemed to be associated to Trump’s prosecution.
Then, on Wednesday, simply hours earlier than LockBit’s deadline for the county to pay its ransom expired, the countdown timer for that leak on Lockbit’s web site froze, with an added line of textual content that learn, “Timer stopped.” At the promised time of 1:49 PM UTC Thursday, the leak did not materialize. Instead, all point out of Fulton County was faraway from LockBit’s extortion risk website.
In Thursday’s press convention, Fulton County Chairman Rob Pitts denied that the county had paid Lockbit’s extortion payment. “We haven’t paid any ransom, nor has any ransom been paid on our behalf,” Pitts stated.
LockBit as a substitute might be bluffing—both it would not have the items it claims or is not prepared to surrender on its extortion demand. Robert McArdle, a researcher who leads a cybercrime-focused analysis crew at safety agency Trend Micro and was concerned in the legislation enforcement operation towards LockBit, says the group’s thus-far empty risk is an indication that it was probably extra disrupted by the bust than it needs to confess.
“This seems to be additional proof of the difficulties dealing with LockBit ever since Op Chronos passed off, and must be thought-about as an indication they’re unable to reliably comply with by on their statements,” says McArdle. He factors out that the victims listed on the group’s new dark-web website have been all compromised previous to Operation Chronos and that persevering with to threaten them is the group’s try to “seem as if all the things is regular when most proof factors very a lot to the opposite.”
There stay different theories, nonetheless, that Lockbit may nonetheless possess the courtroom’s information however is looking for to make use of it in another means. “They typically do not lie about victims, as a result of they’re so frightened about their repute,” says Jon DiMaggio, the ransomware-focused chief safety strategist at cybersecurity agency Analyst1. He notes that the resolution to take down the leak risk might have been the resolution of the “affiliate” hackers who companion with LockBit to penetrate victims like Fulton County and will have totally different motivations from LockBit itself.
If Fulton County paperwork do stay in the arms of hackers, and if any of them relate to the Trump case, they might additional complicate an already deeply messy trial. The state’s case has been rocked by allegations that the prosecutor in the case, Fulton County district legal professional Fanni Willis, had an improper affair with one other prosecutor concerned in Trump’s prosecution, which the protection has argued ought to require Willis’ dismissal. The compromise of personal paperwork in the case may make the proceedings—and the upcoming US presidential election—much more chaotic.
“We’re watching with curiosity to see how the Fulton leak develops,” Trend Micro’s McArdle says. So, little doubt, will the US political sphere—together with a sure former president.
Additional reporting by Matt Burgess.
Updated 2/29/2024, 4:15 pm EST with a press release from Fulton County Commission Chairman Robb Pitts.
