Metro Vancouver TransLink hit by Egregor Ransomware
On December 1st TransLink the public transport operator in Vancouver, Canada said it was “investigating an issue.” by a ransomware attack. That turned out to be true. Now, ransomware letters are rolling off the printers (example here). Passengers on the transit system were unable to use their credit and debit cards for ticket payments. Sources say they do not intend to pay the ransomware.
The Egregor ransomware gang struck TransLink, the authority responsible for managing Metro Vancouver's transportation network.The authority later confirmed that it had suffered a ransomware attack and that those responsible for the infection had used its printers to deliver their ransom note.