Immediately, the police blamed Russian hackers, but Barlag later told WFAA that experts told him it “more likely originated in Ukraine.” The official press release, however, states, “It is unknown for certain where the virus originated from.”
The ransomware attack occurred in December, according to a press release issued last week. The malware “had been introduced onto the network from a spam email that had come from a cloned email address imitating a department-issued email address.”
The server and all computers were “immediately disconnected” from the internet and Cockrell Hill contacted the FBI Cybercrimes unit. The ransom demand was nearly $4,000 and the feds said paying was no guarantee the decryption key would be provided. So, the police decided not to pay and to instead wipe the server.
Click here to continue reading.