Morgan County, Missouri: DoppelPaymer publishes the first data stolen during the cyber attack
Morgan County in Missouri is one of the latest government institutions affected by the DoppelPaymer ransomware group.
The ransomware group, during the attack on the County's computer systems, exfiltrated sensitive documents and some of them were posted on the dark web.
The cyber attack began about ten days ago, but to date no county government office has released statements on the data breach immediately on the institutional website.
At the moment DoppelPaymer has published "only" 5 files for a total of about 500 KB, 4 files in Microsoft Word format and one in Microsoft Excel format, but the limited publication of the material exfiltrated after a cyber attack is now a characteristic of this group of hacker.
While one of the 4 Word documents refers to a warrant request for the payment of some supplies for the prison. The others are, a request report sent to the county court to investigate the contents of a Facebook account, and the messaging service of an adult Missouri citizen guilty, according to police evidence, of having had sexual intercourse with a minor resident in the same county.
The second file is an arrest report by a Morgan County Detective of a woman for illegal possession of marijuana, synthetic cannabis and a considerable amount of painkillers. An arrest warrant from another Missouri County also hung on the woman.
The third file that the cybercriminals uploaded to their site is a shuddering document, it concerns an investigation report on a series of images contained within a USB stick. From the investigations, a case of sodomy or attempted sodomy and / or possession of images of child pornography would emerge.
The Excel file contains a table of the income and expenses incurred by the Morgan County Sheriff's Office during 2016.
Yesterday and today SuspectFile sent an email to the Sheriff's office and the offices of the President Commissioner and the Public Administrator to ask for a statement on the matter, but at the moment no one has answered us.
A curious note that I already anticipated yesterday on my Twitter profile is the mistake made by DoppelPaymer in reporting the URL of the site , writing the address confused the URL of Morgan County in Missouri (http: //www.morgan -county.org) with that of Morgan County in the state of Utah (http://www.morgan-county.net) as reported in the image below.
The ransomware group, during the attack on the County's computer systems, exfiltrated sensitive documents and some of them were posted on the dark web.
The cyber attack began about ten days ago, but to date no county government office has released statements on the data breach immediately on the institutional website.
At the moment DoppelPaymer has published "only" 5 files for a total of about 500 KB, 4 files in Microsoft Word format and one in Microsoft Excel format, but the limited publication of the material exfiltrated after a cyber attack is now a characteristic of this group of hacker.
While one of the 4 Word documents refers to a warrant request for the payment of some supplies for the prison. The others are, a request report sent to the county court to investigate the contents of a Facebook account, and the messaging service of an adult Missouri citizen guilty, according to police evidence, of having had sexual intercourse with a minor resident in the same county.
The second file is an arrest report by a Morgan County Detective of a woman for illegal possession of marijuana, synthetic cannabis and a considerable amount of painkillers. An arrest warrant from another Missouri County also hung on the woman.
The third file that the cybercriminals uploaded to their site is a shuddering document, it concerns an investigation report on a series of images contained within a USB stick. From the investigations, a case of sodomy or attempted sodomy and / or possession of images of child pornography would emerge.
The Excel file contains a table of the income and expenses incurred by the Morgan County Sheriff's Office during 2016.
Yesterday and today SuspectFile sent an email to the Sheriff's office and the offices of the President Commissioner and the Public Administrator to ask for a statement on the matter, but at the moment no one has answered us.
A curious note that I already anticipated yesterday on my Twitter profile is the mistake made by DoppelPaymer in reporting the URL of the site , writing the address confused the URL of Morgan County in Missouri (http: //www.morgan -county.org) with that of Morgan County in the state of Utah (http://www.morgan-county.net) as reported in the image below.
