International Arrest Warrants Issued for 'Wizard Spider' Ransomware Attackers
A major cyber attack on Neustadt am Rübenberge's city administration in 2019 has led to an extensive investigation into international ransomware criminals. The 'Wizard Spider' network, based in Russia, is suspected of using the malware 'Ryuk' to extort a high sum in bitcoin price, leaving the city partially operational for months.
The investigation, led by the central cybercrime unit in Verden and Hannover's police headquarters, has revealed the network's hierarchical structure and the threat it poses to authorities, institutions, and companies. The attackers gained access to systems over weeks, rendering backup systems unusable. They demanded a high bitcoin price sum, threatening to delete all data if not paid.
Five suspected money launderers have been identified for managing cryptocurrency flows from digital extortions. International arrest warrants have been issued for six suspects, two of whom are directly linked to the Neustadt attack. Between 2018 and 2021, 170 German cases involving the group were known, with documented damage amounting to 46 million euros. The Hannover police headquarters warns of the continuing threat and urges regular system updates, employee IT security training, and immediate reporting of cyber attacks.
The investigation into the 'Wizard Spider' network has uncovered the extent of its operations and the damage caused. With international arrest warrants issued, authorities are working to bring those responsible to justice. Meanwhile, institutions are urged to bolster their cybersecurity measures to protect against future threats.
