Cybercrime in Carinthia – LH Kaiser after a hacker attack: “We don’t pay!”

A quick look back: Less than 14 days ago, the IT systems of the Carinthian state government were massively attacked by the hacker group “Black Cat” – the attack was so brutal that a number of services were unavailable and had to be painstakingly restored. Almost a week later, the passports could be issued again. But then came another setback…

Last Friday, the cyber criminals carried out their threat – they attacked the state government again! However, this attack was repulsed. Nevertheless, the situation is precarious: because “Black Cat” has published sensitive data on the dark web – including photos of passports and ID cards, scans of bank cards, issued visas, tons of emails and a large folder of Hypo-Heta files .

LH provides information to IT experts
While IT experts judge the situation as delicate and warn of more leaked data, state spokesman Gerd Kurath calmed down at a media event on Friday: “It has not yet been confirmed whether it is really state data. We are investigating the matter.” Now, a few days later, Governor Peter Kaiser speaks for the first time at a press conference along with IT and cybercrime expert Cornelius Granig and the head of the state’s IT department Harald Brunner. state police of Carinthia are also present.

Keizer: “We do everything”
Governor Peter Kaiser spoke on Monday about a criminal hacker attack: “We have taken every conceivable measure and set up a crisis management team.” Since the first attack, there have been several other attacks in the form of overload requests – these could be repulsed. “We do everything we can to ensure the well-being of the Carinthian population.”

“We don’t pay”
The state now operates according to two principles: “Safety before speed,” according to LH Kaiser and, “Restore the systems to their benefit for the citizens.” The governor strongly condemned the attack: “This is serious blackmail. In spite of everything, they still do not want to meet the ransom demand: “I want to say it again clearly and unequivocally: the state of Carinthia does not allow the blackmail!”

Numerous security measures
Cornelius Granig, IT and cybercrime expert who supports the country in tackling it, agrees with Kaiser: “It is important not to give in and not to make payments, because there is no guarantee that the perpetrators will contact with any crime.” keep a contract. It is very possible that the ransom will be paid and that attacks are still taking place.”

Moreover, according to Granig, this provides a preliminary stage for other crimes: “These groups of criminals work very closely together on the dark web.”

Numerous security measures
Forensic investigations following the cyber attack are currently in full swing and international assistance has also been requested. Numerous security measures have been updated and expanded, confirms Harald Brunner, head of the state’s IT department:

How realistic is it to catch perpetrators?
Solving crimes on the dark web is extremely difficult, Granig says: “The clarity rate here is very low because this part of the internet is encrypted and offers the perpetrator anonymity.” Cyber ​​criminals are usually caught because they are socially conspicuous or careless, explains Granig: “For example, if a perpetrator from Eastern Europe suddenly has a lot of money, goes on a luxury holiday and buys an expensive Ferrari. Then the police will be alert, including Europol.”