Ransomware attack hits luxury hotel's keycard system

midian182

Posts: 9,738   +121
Staff member

If you’re in any doubt as to the rising popularity of ransomware, here’s today’s second piece of news related to the malicious software: It’s been reported that the malware was used to prevent guests accessing their rooms at a luxury hotel after it infected the resort’s electronic key system.

Romantik Seehotel Jägerwirt, a four-star hotel in the Austrian Alps, ended up paying attackers $1600 to release its paralyzed systems, according to owner Christoph Brandstaetter. Initial reports stated that guests were locked inside their rooms, but this wasn’t true.

Motherboard writes that the 180 guests who had checked in before the attack were able to get in and out of their rooms thanks to the internal system, which wasn’t networked with the infected computers. However, no new keycards could be issued to the guests checking-in during the 24-hour period that the reservation system was down, leaving no option but to hand over the ransom.

“The police told us that we are one of many companies hacked recently,” Brandstaetter said. “They are trying to figure out who made the cyberattack.”

The incident marks the third time in under a year that the hotel has been hit with ransomware. The frequency suggests that the attackers have been leaving backdoors on the system that allow them to mount new attacks whenever they need more cash.

Brandstaetter said that system upgrades had been installed, preventing what would have been a fourth attack. But just to be sure, he plans to change the hotel’s locks to “old-fashioned locks with real keys” when it undergoes its next refurbishment.

“We made it public because we have many colleagues and other companies who have had these cyberattacks,” Brandstaetter said. “It's not just our hotel at all.”

Permalink to story.

 
Shoot ..... nothing there a good fire axe wouldn't fix ...... temporarily, of course .....
 
You'd think that after 3 successful attacks by the hackers in one year the hotel staff would've cottoned on to the fact that their system security was lacking lacking a bit of je ne sais quois after the first one and battened down the hatches, thus prevent the other two. Maybe they're just gluttons for punishment or enjoy paying ransoms.
 
Why is the key card system connected to the internet? They could just make it an internal network. Also, the best defense from ransomware is backups. Instead of paying the ransom, just pull the backup drive out of the drawer and restore the files. Since this kept happening, I would think they would have implemented these options by now.
 
There's a saying in Australia by people who think that bad things will never happen to them, "She'll be right, mate." They leave keys in their cars, don't lock house doors when away, use very weak passwords on their computers, generally the same for every account and web site..... but when their vehicle is stolen, their car is stolen, their computer is hacked .... they do believe that those things happening to the,selves is not their fault.
To those people who do not protect their computer systems to the maximum with all the security systems available, "In our modern day era of liars, cheats, thieves, and hackers, "She will NOT be RIGHT, MATE !!
 
Back