Security News > 2021 > December > Canadian charged with running ransomware attack on US state of Alaska
A Canadian man is accused of masterminding ransomware attacks that caused "Damage" to systems belonging to the US state of Alaska.
A federal indictment against Matthew Philbert, 31, of Ottawa, was unsealed yesterday, and he was also concurrently charged by the Canadian authorities with a number of other criminal offences at the same time.
US prosecutors [PDF] claimed he carried out "Cyber related offences" - including a specific 2018 attack on a computer in Alaska.
Detective Inspector Matt Watson of the Ontario Provincial Police's Criminal Investigation Branch told Canadian journalists: "We had individuals, just individuals whose home computers were compromised. We had small, medium-sized businesses. Many of these businesses were just hanging on by their fingernails through COVID and then they get hit with a very expensive ransomware demand. That's pretty tough."
He is said to have become a suspect after the FBI contacted their Canadian counterparts following ransomware attacks in Alaska.
In 2019, a ransomware attack caused headaches for the remote Arctic province of Nunavut, which appeared to come from the DoppelPaymer ransomware gang.
News URL
Related news
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- US accuses Canadian math prodigy of $65M crypto scheme (source)
- Hacker pleads guilty to SIM swap attack on US SEC X account (source)
- All your 8Base are belong to us: Ransomware crew busted in global sting (source)
- US sanctions LockBit ransomware’s bulletproof hosting provider (source)
- RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset (source)
- Chinese espionage tools deployed in RA World ransomware attack (source)
- Critical PostgreSQL bug tied to zero-day attack on US Treasury (source)
- Lee Enterprises newspaper disruptions caused by ransomware attack (source)
- US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware (source)