Papua New Guinea ‘s finance ministry was hit by a ransomware

DragonForce operator chained SimpleHelp flaws

A ransomware attack hit Papua New Guinea ‘s finance ministry and disrupted government payments and operations.

Government officials confirmed that Papua New Guinea’s finance ministry was hit by a ransomware attack that disrupted government payments and operations.

The ransomware infected the Department of Finance’s Integrated Financial Management System a week ago, said the finance minister and acting treasurer, John Pundari.

Pundari also added that the government didn’t pay a ransom to the threat actors and the system was recovered from backups.

The system was used to manage access to hundreds of millions of dollars in foreign aid money. The government was not able to pay cheques and ordinary operations were impacted.

“The government and the people of Papua New Guinea can be assured that the government financial services will continue as usual,” Pundari said. “The Department is conscious of the security and integrity of its data. Therefore restoration of services to all government agencies, including the sub-national level, will be done gradually, so as not to compromise or allow any further spread of this malware or other virus.”

As a precaution, the government blocked access to the affected network to sanitize the infected systems.

“The department has now managed to fully restore the system, however, because of the risk, we are playing safe by not allowing full usage of the affected network,” said Pundari.

At this time, the authorities did not provide details about the attack, such as the ransomware family involved ed if the department has suffered a data breach.

Follow me on Twitter: @securityaffairs and Facebook

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – hacking, cybercrime)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.