British Columbia Law Firm’s Computer Network Hacked by Cyber-Extortionist

• Author: Dan Pinnington
• Date: January 12, 2015

The Law Society of BC recently issued a warning to its members to be vigilant about their firm’s cyber security after a BC firm’s files were held captive by a hacker who encrypted them and tried to extort payment in return for restoring access. There have been similar cases in Ontario in the last year.

…the firm found that its computer system was hacked and paralyzed by a computer virus known as the Cryptowall Virus when the staff showed up for work on Monday, December 29, 2014. Notices appeared on some of the firm’s computer monitors stating “Your files were encrypted and locked with a RSA2048 key.” The firm was advised to contact an address within 12 hours and pay an extortion fee to have the encryption unlocked. The notices further advised that if the firm did not pay the fee within the stipulated time, the fee would double. Finally, without payment, the files would be “irrevocably broken” after 30 days. The firm sought the help of its computer technician and did not pay the ransom or click on links provided by the extortionist regarding payment that may have exposed the firm to other risks. The firm had backed up its information and with the aid of professional technical assistance, was able to resume operations with systems running normally. The firm contacted the police who provided the firm with information about the virus which was likely transferred through an email attachment.

“Ransomware” infections are becoming much more common recently and are usually spread by infected email attachments or website links that trigger a download. Another common type...