Dragonforce Ransomware Locks Local Norwegian Newspaper Servers, Printing Halted

Norwegian regional newspaper Altaposten and its sister publication Ávvir were hit by a ransomware attack. The ransomware locked key IT resources, including the server shared by both newspapers, and prevented staff from accessing content and publishing normally. The media outlet’s owners refused to pay the ransom. Management stated it was more cost‑effective to discard the affected server and rebuild rather than follow the attackers’ instructions to retrieve decryption keys. The printed edition of Altaposten was canceled — the first time since the paper’s launch in 1969.

Estimated Cost

IT server rebuild; canceled print edition; operational disruption

Threat Source

Impacts

OT IT