Today's cybersecurity headlines are brought to you by ThreatPerspective


Ethical Hacking News

The Interlock Ransomware Gang Strikes Again: A City Under Siege


The city of Saint Paul, Minnesota, has been targeted by the Interlock ransomware gang in a devastating cyberattack that has brought its digital services and critical systems to a grinding halt. The incident highlights the ongoing need for robust cybersecurity measures to protect organizations from the increasing threat posed by groups like Interlock.

  • The city of Saint Paul, Minnesota was targeted by the Interlock ransomware gang, resulting in the disruption of digital services and critical systems.
  • The Interlock ransomware gang claimed responsibility for the attack, stealing over 66,000 files or 43 GB worth of data from the city.
  • The gang's tactics have been described as "sophisticated" and "relentless," posing a significant threat to critical infrastructure organizations.
  • Emergency services were unaffected by the cyberattack, but digital services remain unavailable due to limited system access.
  • The incident highlights the need for robust cybersecurity measures to protect organizations from ransomware gangs like Interlock.



  • The city of Saint Paul, Minnesota, has found itself at the mercy of the Interlock ransomware gang, a notorious group known for its devastating cyberattacks on organizations across various industry sectors. The latest incident, which occurred in late July, saw the city's digital services and critical systems brought to a grinding halt, leaving residents and officials alike scratching their heads in dismay.

    According to the mayor's office, the Interlock ransomware gang claimed responsibility for the attack, stating that it had stolen over 66,000 files or 43 GB worth of data from the city. The gang further claimed that they had damaged a large part of the infrastructure, resulting in significant losses and damage, including compromising the data of residents.

    The Interlock ransomware gang has been linked to several high-profile attacks in recent months, including breaches at healthcare organizations such as DaVita and Kettering Health. The group's tactics have been described as "sophisticated" and "relentless," with experts warning that they pose a significant threat to critical infrastructure organizations.

    In this latest incident, the city of Saint Paul activated the National Guard in response to the cyberattack, requesting support from Minnesota National Guard's cyber protection unit. The move was seen as a necessary measure to ensure that the city's systems and services were restored as quickly as possible.

    Despite the efforts of the National Guard, some of the city's digital services remain unavailable due to limited system access. Online payments are currently unavailable, and residents can expect additional billing and service updates once systems are fully restored.

    The mayor's office has assured residents that emergency services have been unaffected by the cyberattack, but the incident has undoubtedly caused significant disruption to the city's operations.

    The Interlock ransomware gang is believed to be one of several groups operating in the dark web, targeting organizations across various industry sectors. The group's activities are often characterized by a "double extortion" approach, where they demand ransom from affected organizations and also threaten to publish stolen data on their leak site if payments are not made.

    In this latest incident, the Interlock ransomware gang added the City of Saint Paul to its dark web portal, claiming that it had stolen sensitive information from the city. The move has been seen as a brazen display of power by the group, highlighting the need for organizations to take robust cybersecurity measures to protect themselves against such threats.

    The incident serves as a stark reminder of the ongoing threat posed by ransomware gangs like Interlock. As experts warn, these groups are becoming increasingly sophisticated and relentless in their tactics, making them a significant concern for organizations across various industry sectors.

    In response to the latest incident, CISA (Cybersecurity and Infrastructure Security Agency) and the FBI issued a warning about increased Interlock ransomware activity targeting critical infrastructure organizations, sharing mitigation measures to defend against such attacks. The agencies' warnings serve as a timely reminder of the need for organizations to prioritize cybersecurity and take proactive measures to protect themselves against such threats.

    As the city of Saint Paul continues to work towards restoring its digital services and systems, it is clear that the Interlock ransomware gang poses a significant threat to critical infrastructure organizations. The incident serves as a stark reminder of the ongoing need for robust cybersecurity measures to protect organizations from the increasing threat posed by groups like Interlock.



    Related Information:
  • https://www.ethicalhackingnews.com/articles/The-Interlock-Ransomware-Gang-Strikes-Again-A-City-Under-Siege-ehn.shtml

  • https://www.bleepingcomputer.com/news/security/saint-paul-cyberattack-linked-to-interlock-ransomware-gang/

  • https://cyble.com/threat-actor-profiles/interlock-ransomware-group/

  • https://www.reddit.com/r/AskIreland/comments/15lur9e/email_scam_what_is_an_apt_hacking_group/


  • Published: Tue Aug 12 06:11:42 2025 by llama3.2 3B Q4_K_M













    © Ethical Hacking News . All rights reserved.

    Privacy | Terms of Use | Contact Us