Building Automation Archives

Cyberattack Causes Widespread Outage at Casino del Sol, AZ

February 21, 2024

A February 21 cyberattack caused widespread system outage at The Casino del Sol in Tucson, Arizona. The attack disabled ATMs, credit card systems, Wi-Fi, TV, phones, and electronic door keys systems.

Fifteen days later, on March 7, Casino Del Sol posted an update saying “all restaurants and bars are now able to accept card payments. Food and Beverage vouchers are still unable to be processed at this time but rewards lost will be honored ta a later date.”

Phone lines are still down and new reservations still cannot be made, but all current bookings are being honored.

Significant Electrical Malfunctions at Draguignan Prison Center

January 11, 2023

Since Wednesday January 11, the remand center has been plagued by computer difficulties which have caused significant electrical malfunctions. A computer virus is expected to have sowed discord and caused numerous malfunctions. To monitor the inmates, management called on intervention teams while waiting for the cameras to be put back into operation. [machine translated].

Cyberattack at Leading Building Management Co. GEZE Raises Product Integrity Concerns

February 1, 2023

GEZE, a leading building management company, cyberattack targeted core offerings, including automatic door and window solutions, raising concerns about product integrity and safety features.

The company website statement [sinds removed] stated : “Our systems were exposed to a cyber attack. We have decided to shut down our system landscape preventively and to start a controlled, step-by-step reconstruction. Therefore, we are unfortunately not available at the moment and ask for your understanding. We are making every effort to restore our systems as quickly and securely as possible.”

Complicated Situation for Management at French Prison as CyberAttack cuts Power

January 11, 2023

Since Wednesday January 11, the remand center has been plagued by computer difficulties which have caused significant electrical malfunctions. “A virus was installed in the system via a USB key used by a teacher who was giving a lesson to inmates that day,” confirms Julien André, CGT staff representative within the establishment. prison. The computer system was shut down.

The prison was without power last weekend. “Friday evening, the pellets blew, cutting off all the electricity supply to the jail (sic), says Julien André, on duty that day. No more light, no more surveillance cameras.” A complicated situation for the management of the establishment, which had to call in numerous reinforcements.

MGM Shuts Down Operations for 10 Days Across Las Vegas Properties

September 8, 2023

A major cyberattack disrupted operations of MGM Resort in Las Vegas. The cyberattack forced MGM to shut down significant portions of its internal networks, affecting various aspects of its services. Guests at MGM’s hotels and casinos, including renowned establishments like the Bellagio, Aria, and Cosmopolitan, have reported widespread disruptions.

The hackers spear phished an MGM employee through social media. MGM did not pay the ransom.

Massive Ransomware Attack at Johnson Controls

September 24, 2023

Johnson Controls International suffered a massive ransomware attack. The attack encrypted many of the company devices, including VMware ESXi servers, impacting the company’s and its subsidiaries’ operations. Johnson Controls shut down portions of its IT systems over the weekend. After which many of its subsidiaries, including York, Simplex, and Ruskin, begun to display technical outage messages on website login pages and customer portals.

Cost of the attack to the company was $27 million.

Customers of York report that they are told the company’s systems are down. “Their computer system crashed over the weekend. Manufacturing and everything is down,” a York customer posted to Reddit. “I talked to our rep and he said someone hacked them,” posted another customer. This morning, Nextron Systems threat researcher Gameel Ali tweeted a sample of a Dark Angels VMw. BleepingComputer reports the ransom note links to a negotiation chat where the ransomware gang demands $51 million to provide a decryptor and to delete stolen data. The threat actors also claim to have stolen over 27 TB of corporate data and encrypted the company’s VMWare ESXi virtual machines during the attack.

BleepingComputer reports that the Linux encryptor used in the Johnson Controls attack is the same as ones used by Ragnar Locker since 2021. They contacted Johnson Controls with questions regarding the attack but has not received a response.

Wisag Group Hacked Again a Year Later

February 9, 2023

Almost exactly a year after the first attack, the service group Wisag fell victim to hackers again. On Tuesday morning, the IT department found “irregularities” on the servers, said a spokeswoman for the Frankfurt-based company. As a result, all systems and applications were immediately taken off the network.

“At the current time, it is not apparent that customer or internal data has leaked,” it continues. “We are optimistic that we can safely put all systems back into operation as soon as possible.”

IT Systems Shut Down after Ransomware Attack at Glutz, a Swiss Specialist in Access Solutions

November 28, 2022

Glutz, a specialist in access solutions, fell victim to a ransomware attack at the end of November. Cyber criminals encrypted data on the systems, as the Solothurn-based company announced at the time. As a security measure, all internal IT systems have been shut down.

“Since December 7th we have been working again in limited normal operation,” writes Marco Hauri, CEO, at the request of inside-it.ch. Telephony and e-mail communication could be used consistently. The costs incurred by the attack cannot be estimated at this time.