<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>Comments on: San Francisco Rail System Hacker Hacked — Krebs on Security</title>
	<atom:link href="http://www.epanorama.net/blog/2016/11/29/san-francisco-rail-system-hacker-hacked-krebs-on-security/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.epanorama.net/blog/2016/11/29/san-francisco-rail-system-hacker-hacked-krebs-on-security/</link>
	<description>All about electronics and circuit design</description>
	<lastBuildDate>Tue, 28 Apr 2026 04:07:28 +0000</lastBuildDate>
		<sy:updatePeriod>hourly</sy:updatePeriod>
		<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.9.14</generator>
	<item>
		<title>By: Tomi Engdahl</title>
		<link>https://www.epanorama.net/blog/2016/11/29/san-francisco-rail-system-hacker-hacked-krebs-on-security/comment-page-1/#comment-1526619</link>
		<dc:creator><![CDATA[Tomi Engdahl]]></dc:creator>
		<pubDate>Wed, 30 Nov 2016 08:29:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.epanorama.net/newepa/?p=49852#comment-1526619</guid>
		<description><![CDATA[Ransomware Attack Disrupts San Francisco Rail System
http://www.securityweek.com/ransomware-attack-disrupts-san-francisco-rail-system

A ransomware attack that began on November 25 forced the San Francisco Municipal Transport Authority (SFMTA, or &#039;Muni&#039;) to progressively close ticketing machines and open the gates to its railway system.

Through Saturday and into Sunday, passengers were able to ride for free, some thinking it was a Black Friday holiday promotion. The station computers, however, showed the message &quot;You Hacked, ALL Data Encrypted. Contact For Key(cryptom27@yandex.com)ID:681 ,Enter.&quot;

SFMTA has so far given little official information, but did say the attack disrupted some internal computer systems, including email.

All Your Computer&#039;s/Server&#039;s in MUNI-RAILWAY Domain Encrypted By AES 2048Bit!&quot; and demanded 100 bitcoins (about $73,000) for the decryption key.

The disruption to travelers was eliminated when the SFMTA allowed passengers to ride for free. By removing a driving factor from the equation, the hack loses value and the ransom will likely go unpaid.&quot;]]></description>
		<content:encoded><![CDATA[<p>Ransomware Attack Disrupts San Francisco Rail System<br />
<a href="http://www.securityweek.com/ransomware-attack-disrupts-san-francisco-rail-system" rel="nofollow">http://www.securityweek.com/ransomware-attack-disrupts-san-francisco-rail-system</a></p>
<p>A ransomware attack that began on November 25 forced the San Francisco Municipal Transport Authority (SFMTA, or &#8216;Muni&#8217;) to progressively close ticketing machines and open the gates to its railway system.</p>
<p>Through Saturday and into Sunday, passengers were able to ride for free, some thinking it was a Black Friday holiday promotion. The station computers, however, showed the message &#8220;You Hacked, ALL Data Encrypted. Contact For Key(cryptom27@yandex.com)ID:681 ,Enter.&#8221;</p>
<p>SFMTA has so far given little official information, but did say the attack disrupted some internal computer systems, including email.</p>
<p>All Your Computer&#8217;s/Server&#8217;s in MUNI-RAILWAY Domain Encrypted By AES 2048Bit!&#8221; and demanded 100 bitcoins (about $73,000) for the decryption key.</p>
<p>The disruption to travelers was eliminated when the SFMTA allowed passengers to ride for free. By removing a driving factor from the equation, the hack loses value and the ransom will likely go unpaid.&#8221;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
