Cloak Ransomware Strikes Again: Virginia Attorney General’s Office Goes Old School

Cloak ransomware group cyberattacked the Virginia Attorney General’s Office, forcing officials to revert to paper filings. The group claimed they swiped 134GB of sensitive data. As the office deals with the aftermath, the Cloak team is probably celebrating with a new “Tech Savvy Bandit” trophy!

Pro Dashboard

Hot Take:

Looks like the Virginia Attorney General’s Office has become the latest victim in the ransomware rodeo, courtesy of the Cloak group. Who knew the legal system would have to dust off those old typewriters and get back to paper filings? Someone should remind Cloak that hacking the office that prosecutes cybercrime might not be the best long-term strategy. But hey, at least the fax machine is getting some love again.

Key Points:

  • The Cloak ransomware group claimed responsibility for hacking the Virginia Attorney General’s Office in February.
  • The breach led to shutdowns of IT systems, email, and VPN, forcing officials to go retro with paper filings.
  • 134GB of sensitive data was allegedly stolen, with proof shared on the group’s Tor leak site.
  • Cloak specializes in attacking small to medium-sized businesses, primarily using social engineering and Initial Access Brokers.
  • The group employs an ARCrypter ransomware variant, which has roots in Babuk’s leaked code.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?