Ransomware Hits LG Self-Service Kiosks Across South Korea, Possibly WannaCry

LASER_oneXM

Level 37
Thread author
Verified
Top Poster
Well-known
Feb 4, 2016
2,520
Representatives for LG South Korea said on Wednesday that a mysterious ransomware strain has infected self-servicing kiosks at various service centers across the country.
The infections, reported by local newspaper Seoul Shinmun, took root on Monday, August 14.
An LG spokesperson said the ransomware looked like WannaCry, albeit no official investigation confirmed it as of yet. The company said it reported the event to the Korea Internet & Security Agency as soon as it happened.

Self-servicing kiosks most likely left without patches
LG told local reporters that all service kiosks were shut down as staff detected the first infected devices. The company did not say how many kiosks were affected.

Staff installed updates on kiosks where the ransomware did not manage to encrypt data. This suggests that self-servicing kiosks were left without updates. MS17-010 is the security bulletin system administrators had to install.

For security professionals, LG's mistake is mind-boggling and unexplainable. The WannaCry ransomware outbreak hit almost all countries across the world in mid-May and infected hundreds of thousands of computers, mainly those running Windows 7.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top