The largest centre of the Spanish National Research Council (CSIC) has been the victim of a ransomware-type cyberattack, paralyzing a large part of its activity. This type of attack encrypts critical files and, Sometimes, it even seeks to disable backups to demand a ransom from victims. Although the attack has not been fully detailed by the authorities, it is confirmed that it affected essential systems of the body, which complicated his immediate response.
The CSIC is now working on the containment and recovery of the affected systems, following the protocols established for incidents of this type. This includes identifying the starting point of the attack, Securing backups, and restore essential functions. In attacks of this magnitude, if systems have been severely compromised, it may be necessary to rebuild the network from scratch, resulting in data loss and long periods of downtime.
The attackers' strategy is often complex and well-planned, with a focus on big targets that allow substantial profits to be made through crypto bailouts. However, Cybersecurity experts and bodies, such as INCIBE, they recommend not giving in to blackmail, since the return of data is not guaranteed and encourages the business of cybercrime. In addition, Investment in preventative measures such as hybrid backups and advanced detection systems can be key to minimizing the impact.
At last, This incident underscores the growing threat of ransomware in public and private institutions, highlighting the importance of robust cybersecurity and effective contingency plans. Although the CSIC is striving to restore its operation, the attack highlights the vulnerability of critical infrastructures in Spain to sophisticated cyberattacks.
Fountain: El País
Image: Luis García, CC BY-SA 3.0 ES, via Wikimedia Commons