The cloud hosting company ASAC received a
cyberattack in the early hours of Saturday 8, this affected the web connection and
systems of various town halls across Spain, among which
we find the town hall of the Community of Madrid, that of Oviedo in the
Principality of Asturias or in Fuenlabrada.
The Asturian company reported on Saturday itself a computer attack
with ransomware, a cyberattack that left several town halls non-operational,
as well as several Spanish entities.
In a statement released by the company they indicate that they have
various security certifications and a National Security Scheme,
aunque esto no ha conseguido que los cibercriminales no consiguieran encriptar parte
de sus sistemas. En el comunicado añaden que no toda gestión de seguridad se
centra en detener el ataque antes de su suceso, sino en una detección rápida
para poder realizar una recuperación y respuesta rápida. Por parte de ASAC
indican que su rapidez en la detección del ciberataque ha permitido que los
datos de sus clientes no se vieron filtrados, evitando ningún tipo de pérdida.
El ASAC se vio afectado por el ransomware Zeppelin, una cepa
totalmente distinta a las vistas estas últimas semanas en los ciberataques al
SEPE o a Phone House. Zeppelin apareció por primera vez en el año 2019, being
un ransomware distribuido normalmente mediante correo electrónico como archivo
malicious attachment. Like most ransomware, it has the ability to take
control of the infected computer in a short time and spread through the network that the
infected device is connected to, thus managing to encrypt
most of the data and demand a ransom for the encrypted data, en algunos
in some cases, in addition to encrypting data, they also exfiltrate information. In the case of ASAC, a
ransom was demanded for the encrypted data, although the company did not give in to
the blackmail.
In addition to the mentioned town halls, entities such as the Spanish Foundation for Science and Technology
FECYT
(the Court of Auditors or the National Security Council), CSN (have also been affected).