Ransomware attack: Police register extortion case, operations yet to resume at GTI
Mumbai city news: “Since we are unable to use our software, we have not been able to operate since Tuesday night. The entire process of the loading and discharging the containers are done through our software,” said an official from GTI wishing not to be named.mumbai Updated: Jun 30, 2017 00:30 IST
The Nhava-Seva police on Thursday registered an FIR for cyber-extortion against unidentified hackers in Navi Mumbai after they locked 200 computers and 70 odd laptops of the Gateway Terminal India (GTI) on Tuesday.
The FIR was registered after receiving a written complaint from GTI on Wednesday. Danish shipping giant AP Moller-Maersk operates the GTI, which has the capacity to handle 1.8 million standard container units. Operations run by the GTI at one of the three terminals of Jawaharlal Nehru Port Trust (JNPT), India’s largest container port, came to a standstill on Tuesday night after the global ransomware attack that crippled Russia’s biggest oil company, Ukrainian banks and multinational companies in Europe. After almost 48 hours, the ransomware was still not eliminated.
“Since we are unable to use our software, we have not been able to operate since Tuesday night. The entire process of the loading and discharging the containers are done through our software,” said an official from GTI wishing not to be named.
There was some congestion of containers in the evening but operations were smooth otherwise.
Chetan Kakde, senior police inspector of Nhava-Seva police station, said that an FIR had been registered under Section 384 (punishment for extortion) of the Indian Penal Code and sections 43 (Penalty and compensation for damage to computer, computer system) and 66 (computer related offences) of the Information Technology Act.
On Wednesday, Gulshan Rai, the national cyber security advisor, government of India, inspector-general of police (cyber and PAW) Brijesh Singh, chief custom commissioner John Joseph and senior JNPT officials met for a solution to the attack.
The ranswomware also had a message demanding money in dollars. It had a bitcoin address asking for Rs300 dollars to unlock each system, taking the total amount to over Rs50 lakh.
The Nhava-Seva police are coordinating with IT professionals of GTI for answers. The IT team is trying to come up with a solution to unlock the computers. The manual operations have been started, said a police official.
Tushar Doshi, deputy commissioner of police (crime) said said, “Cyber experts in the company will know how it is troubling operations and its possible outcomes. So, we may also ask for reports from them.”