Affiliated media: Channel 31, TV channel

Incident date: October 9, 2022

Attack type:

• Cyber-, DDoS, and hacker attack on a media outlet

Who attacked: Unknown sources

Source: State Technical Service

Location: Kazakhstan, Almaty Province, Almaty

Additional information:

Employees of Channel 31 found files with suspicious extensions (encrypted files) on their file server. The channel’s system administrator noticed traces of malicious software launched with the help of programs (ProcessHacker, UBitUnlocker). Additionally, connections to other servers were detected from this server. Servers with 1C, accounting file server, WiFi, print server, etc. were attacked. The attackers managed to manually remove the antivirus software installed on all the servers. Currently, the national computer incident response service KZ-CERT is analyzing the consequences of computer systems hacking.