Hackers attack a critical infrastructure of the metropolis

Ransomware hackers have just hit an organization with critical responsibilities: the management of underground telecommunications and electricity infrastructure in Montreal.

Lockbit hackers have been posting a series of screenshots on the dark web site since August 9 representing files they say they stole from the Montreal Electrical Services Commission (CSEM) server. This organization develops and maintains the underground conduits through which the wires of the City of Montreal, Hydro-Québec and telecommunications companies such as Bell and Videotron pass.

Lockbit allegedly stole dozens of files from the Commission’s servers with names like “Chief Accountant”, “Work Instructions”, “PAYE”, “Systems Management” and “Network Management”.

The hackers also show a sectional plan of wired conduits.

The gang threatens to release all of the stolen data on August 24. Typically, hacker gangs like Lockbit demand a ransom from their victim, in exchange for promising not to publish the stolen information.

The EMSB has offered no reaction at this time. “We are preparing a topo to inform people,” says Susanne Beisert, director of human resources for the Commission. She asked to send her questions by email, but La Presse has still received no response.

Hyperactive gang

Lockbit is one of the “most active and destructive” ransomware, according to a statement from the US Department of Justice published in 2022. It would have caused “at least 1000 victims worldwide” indicates the FBI in a complaint filed against a Russo -Canadian arrested in October in Ontario for using the program to engage in extortion.

Mikhail Vasiliev allegedly attacked critical infrastructures and large industrial groups around the world using Lockbit.

Despite this recent strike, the gang has never stopped being active and posting new victims on its hidden web site.

More details to come.