Montenegro

2022 - 9 - 1

Post cover
Image courtesy of "Balkan Insight"

Montenegro Sent Back to Analog by Unprecedented Cyber Attacks (Balkan Insight)

The US has sent a team of FBI investigators to NATO ally Montenegro following an unprecedented cyber assault on the country's public administration.

This can happen if an ISP’s routing policies are vulnerable [i.e., if the router is using default VLAN and default VRF and default routing policies for all its ports]. It will also position a ransom note that often appears when the computer is restarted. “The consequences of these data encryption attacks are even more severe if business systems do not have their own adequate versions of backup copies of data, or the backup copy of data is encrypted with a malicious virus. When a user types a URL, such as ‘google.com’, into their browser, [records](https://www.cloudflare.com/learning/dns/dns-records/) on DNS servers direct that user to Google’s [origin server](https://www.cloudflare.com/learning/cdn/glossary/origin-server/). “We have official confirmation and it has already been listed on the Dark Web, where hacked documents from certain computers in our system will be published,” Dukaj told Montenegro’s public broadcaster. THe government’s Cyber Security Strategy is currently out of date, having expired last year. “The group usually attacks big financial data servers, security or health systems, where private data or accounts of citizens and companies can fetch a good price on the dark web. Courts and the prosecution service are also working only offline, as are the State Property Administration, the Central Register of Business Entities and the fiscal system. “Montenegro is still under cyber attack,” the ministry warned. He also said that the virus used can cost anywhere between $100,000 and $2.5 million on the dark web. “After the ransomware attack last week, Government DNS namespace is blocked so the administration switched to offline mode. “If it is Cuba Ransomware, which is officially confirmed only for the Montenegrin parliament server, it would be a weird development,” said one.

Post cover
Image courtesy of "Cybernews"

Montenegro blames Cuba ransomware for cyberattack | Cybernews (Cybernews)

The cyberattack that crippled the Montenegro government's digital infrastructure was likely carried out by a Russia-linked Cuba ransomware gang, ...

Anonymous, Ukraine’s IT Army, Hacker Forces, and many other hacktivist groups started [targeting Russia’s private and state-owned enterprises](https://cybernews.com/cyber-war/how-do-smash-and-grab-cyberattacks-help-ukraine-in-waging-war/). Cyberwarfare has been plaguing Europe since Russia invaded Ukraine on 24 February. Hackers also tried to infiltrate the government websites of Moldova, a nation wedged between Romania and Ukraine. Authorities say they are yet to receive any ransom demands. Government internet sites have been closed since the attack, which Montenegro’s National Security Agency (ANB) has linked to Russia, although the extent of any data theft is unclear. Cuba ransomware claims that the documents were taken on 19 August.

Post cover
Image courtesy of "bne IntelliNews"

FBI to help Montenegro deal with cyber attacks (bne IntelliNews)

A team of FBI experts will arrive to Montenegro to help the local authorities deal with the cyber attacks aiming the state institutions since August ...

The country has been hit by cyber attacks since August 20 and the government’s website has not been working for several days. The style of attack was carried out under methodology that was specific for Russian agencies, the ANB also noted. A team of FBI experts will arrive to Montenegro to help the local authorities deal with the cyber attacks aiming the state institutions since August 20, public broadcaster RTCG reported on August 31.

Post cover
Image courtesy of "Security Affairs"

FBI is helping Montenegro in investigating the ongoing cyberattack (Security Affairs)

A team of cybersecurity experts from the US FBI will help the authorities in Montenegro to investigate the recent massive cyberattack.

[Montenegro suffered massive and prolonged cyberattacks](http://securityaffairs.co/wordpress/56561/hacking/montenegro-cyber-attacks.html) against government and media websites. “The attack may include disruptions to the public utility, transportation (including border crossings and airport), and telecommunication sectors.” The company also opted to temporarily deactivate some clients’ services as a precaution. The US embassy in Montenegro advised U.S. Embassy in the capital Podgorica. [October 2016 elections](http://www.politico.eu/article/montenegro-to-beef-up-cybersecurity-capabilities-in-wake-of-election-attacks/), amid speculation that the [Russian Government](http://securityaffairs.co/wordpress/52591/hacking/the-jester-against-russia.html) was involved. [GAMEFISH backdoor](http://securityaffairs.co/wordpress/58937/cyber-crime/russian-apt-groups.html) (aka Sednit, Seduploader, JHUHUGIT and Sofacy), a malware that was used only by the APT28 group in past attacks. [said](https://apnews.com/article/russia-ukraine-nato-technology-montenegro-adriatic-sea-54e93b841f737ec8bfdd4a9614869a8b) that Montenegro was “under a hybrid war at the moment.” [joined](http://www.nato.int/cps/cs/natohq/topics_49736.htm) NATO alliance despite the strong opposition from the Russian Government that threatened to retaliate. According to the Minister, the attack began on Thursday night. [the ministry said of the deployment of the Cyber Action Team](https://apnews.com/article/russia-ukraine-technology-hacking-montenegro-2a8eb2df87f657b6d7b9971b7419bff9). [cyber attack](https://securityaffairs.co/wordpress/134900/cyber-warfare-2/montenegro-cyber-attack.html) that hit the government infrastructure last week.

Post cover
Image courtesy of "BleepingComputer"

Montenegro hit by ransomware attack, hackers demand $10 million (BleepingComputer)

The government of Montenegro has admitted that its previous allegations about Russian threat actors attacking critical infrastructure in the country were ...

[focused heavily](https://www.bleepingcomputer.com/news/security/fbi-cuba-ransomware-breached-49-us-critical-infrastructure-orgs/) on U.S.-based organizations. Public Administration Minister Maras Dukaj stated on local television yesterday that behind the attack is an organized cybercrime group. [directed by Russian services](https://www.bleepingcomputer.com/news/security/montenegro-says-russian-cyberattacks-threaten-key-state-functions/).

Post cover
Image courtesy of "LatestLY"

Montenegro is Getting Support from US and Other NATO Allies in ... (LatestLY)

The latest Tweet by Bloomberg states, 'Montenegro is getting support from US and other NATO allies in fending off cyberattacks against its information ...

Post cover
Image courtesy of "SeeNews"

Montenegro's Luka Bar net profit soars in H1 - table (SeeNews)

Montenegro's majority state-owned port operator Luka Bar [MNG:LUBA] recorded a net profit of 5.238 million euro ($5.243 million) in the first six months of.

Luka Bar's capital is composed of 56,766,736 shares with a nominal price of 1.2113 euro apiece. Revenue went up 135% year-on-year to 11.63 million euro in the first half of 2022, while operating costs grew 39.6% to 6.54 million euro, Luka Bar said in a filing with the Montenegro Stock Exchange on Wednesday. PODGORICA (Montenegro), September 1 (SeeNews) - Montenegro's majority state-owned port operator Luka Bar [MNG:LUBA] recorded a net profit of 5.238 million euro ($5.243 million) in the first six months of 2022, sharply up from the 93,967 euro profit in the like period of last year, it said.

Post cover
Image courtesy of "Managing Madrid"

Recap & Highlights: Denmark 5-1 Montenegro; FIFA Women's World ... (Managing Madrid)

The final round of 2023 FIFA WWC European Qualifiers are underway and there are multiple Madridistas involved with their national teams.

The game was already decided by the time of her introduction and that meant she wasn’t as involved in the thick of things as she’d like to be. In the 22nd minute, they managed to hit Denmark on the transition and scored from a cross at the far post by captain, Jasna Đoković, which was met with a brilliant run by Jelena Vujadinović. Søndergaard’s side scored a quick fire couple inside the opening 5 minutes of the second half. Denmark looked set to hand Montenegro a heavy hitting with Bredgaard hitting the post in the 12th minute. The team continued in the second half. They created a shot from a corner with the goalkeeper failing to claim the delivery.

Post cover
Image courtesy of "Bloomberg"

Ransomware Attack Sends Montenegro Reaching Out to NATO ... (Bloomberg)

Hackers targeted websites and databases of the smallest former Yugoslav republic with the “Cuba” ransomware and a new virus named “Zero Date,” Montenegro's ...

[video](https://www.facebook.com/javnaupravacg/videos/393674999618130). [turmoil](https://www.bloomberg.com/news/articles/2022-08-19/montenegro-government-ousted-as-president-s-party-pulls-support).

Post cover
Image courtesy of "SC Magazine"

FBI cyber team to help in massive Montenegro cyberattack probe (SC Magazine)

The FBI is set to deploy a cyber team to Montenegro to assist in the investigation of a massive cyberattack against the Balkan country, which resulted in ...

The FBI is set to deploy a cyber team to Montenegro to assist in the investigation of a massive cyberattack against the Balkan country, which resulted in the disruption of government systems and services, according to The Associated Press. Despite lacking evidence, Russia has been suspected by the country's Agency for National Security to be behind last week's attack, which involved both ransomware and distributed denial-of-service intrusions. The imminent arrival of the FBI cyber team indicates "the excellent cooperation between the United States of America and Montenegro and a proof that we can count on their support in any situation," said Montenegro's Ministry of Internal Affairs.

Post cover
Image courtesy of "Eurohoops"

Turkey survived a close call against Montenegro, Georgia defeated ... (Eurohoops)

Here things got tricky, with Simonovic being called for an offensive foul to Cedi Osman with four seconds left and ultimately Turkey getting the ball. Korkmaz ...

Duda Sanadze had the last shot but failed to send the game to a second overtime. Korkmaz with one more three at the buzzer gave his team a four-point final difference. It’s better for me to say nothing”.

Post cover
Image courtesy of "Celtics Wire"

Former Boston Celtics floor general Shane Larkin gets 18 points, 7 ... (Celtics Wire)

The EuroLeague star helped fend off an upset loss in Day 1 of EuroBasket play.

[https://spoti.fi/3GfUPFi](https://spoti.fi/3GfUPFi) [https://apple.co/3zBKQY6](https://apple.co/3zBKQY6) The former Celtics point guard also put up 7 assists and 2 steals in 31:29 minutes of floor time, turning the ball over twice and fouling once.

Post cover
Image courtesy of "Basketnews.com"

Furkan Korkmaz scores a game-winner to beat Montenegro in the ... (Basketnews.com)

Furkan Korkmaz scored a game-winning floater with 23 seconds remaining to push Turkey over Montenegro 72-68 (14-18, 27-13, 12-20, 19-17). Bojan Dubljevic .

However, Furkan Korkmaz scored a tough floater with 23 seconds remaining to put Turkey up by one. Turkey battled back but Vladimir Mihailovic scored a jumper to push the lead to three (68-65). With four minutes remaining, Bojan Dubljevic made a triple to push the Montenegrins' lead to five (66-61).

Post cover
Image courtesy of "Sports Illustrated"

Sixers' Korkmaz Ices Off Montenegro in EuroBasket Group Stage (Sports Illustrated)

Although the NBA offseason is still going on, professional basketball is still taking place in other parts of the world, with the most recent competition to ...

[@All76ersSI](http://twitter.com/all76erssi) on Twitter! [Philadelphia 76ers](http://si.com/nba/76ers) reserve [Furkan Korkmaz](https://www.si.com/search?query=Furkan+Korkmaz), who plays for the Turkish Men's team, making an appearance in their opening game against Montenegro. [NBA ](http://si.com/nba)offseason is still going on, professional basketball is still taking place in other parts of the world, with the most recent competition to take place being FIBA's EuroBasket, which serves to find the best basketball team in Europe.

Post cover
Image courtesy of "iTech Post"

Government of Montenegro Falls Victim to Ransomware Attack as ... (iTech Post)

The Southeastern European country is seeking the help of the US in combating ransomware attacks. The small nation of Montenegro in Southeastern Europe has ...

The ransomware attack on the Government of Montenegro is not the first in recent months. Dukaj added that Montenegro is "not alone" in its fight against the ransomware attack and lauded its "NATO partners" for standing alongside them. The small nation of Montenegro in Southeastern Europe has been one of the latest victims of a ransomware attack that demanded $10 million. Now, Montenegro is seeking the help of NATO allies to fight the attack. Meanwhile, the European Union announced it would be supporting Montenegro as well, expressing a desire to see Montenegro "protected from cybersecurity threats." Meanwhile, the Cuba ransomware group has been in existence since 2019.

Post cover
Image courtesy of "EU Reporter"

Montenegro blames criminal gang for cyber attacks on government (EU Reporter)

Government internet sites have been closed since the attack, which Montenegro's National Security Agency (ANB) has linked to Russia, although the extent of any ...

[ The positions taken in these articles are not necessarily those of EU Reporter. Data the group claimed to have obtained was publicly available on its web portal, it added.

Post cover
Image courtesy of "Balkan Insight"

Montenegro's Former Ruling Parties Unveil Plans for New Govt (Balkan Insight)

The same parties and blocs that won the August 2020 elections announced plans on Friday to form a new government and so lead the country out of its current ...

“If there is an agreement of the new majority that I will be prime minister, that’s good. The agreement was signed by members of For the Future of Montenegro, Peace is Our Nation and Black on White, which together have 41 of the 81 seats in parliament. On April 28, Black on White and the pro-Serbian Socialist People’s Party and the opposition formed a minority government led by Back on White’s Dritan Abazovic.

Post cover
Image courtesy of "CyberScoop"

Another European nation hit by hackers, Montenegro grapples with ... (CyberScoop)

The wave of digital assaults on Montenegro includes a ransomware attack that's crippled multiple government services.

The State Department on May 6 [announced a $10 million reward](https://www.state.gov/reward-for-information-owners-operators-affiliates-of-the-conti-ransomware-as-a-service-raas/) for information on Conti leadership, citing the Costa Rica incident. “I would hope that, in time, ransomware groups are deterred from attacking nation states by the fact that a), they won’t pay, and b), it will bring upon them greater attention than they will want,” he said. But an attack like this, which has generated headlines and pledges of support from the around the world, changes the game. [February 2022 Mandiant analysis](https://www.mandiant.com/resources/blog/unc2596-cuba-ransomware) examined aspects of the group’s activity and its malware, which it tracks under the label UNC2596. [attacked Costa Rica and Peru](https://www.cyberscoop.com/conti-costa-rica-ransomware-peru-unc1756/) in late April, demanding $10 million and then $20 million. [December 2021 FBI alert](https://www.ic3.gov/Media/News/2021/211203-2.pdf) said the group had compromised at least 49 entities in five critical infrastructure sectors including the financial, government, healthcare, manufacturing and information technology sectors as of November 2021. That said, threat groups do change tactics all the time and this could be a new approach by the group, but we ultimately don’t have enough data to make an assessment with high confidence.” The group behind that attack, “HomeLand Justice,” remains active and as recently as Monday uploaded a series of zip files it says contain various Albanian databases with names and phone numbers to its Telegram channel. — Costa Rica, Peru and Argentina, for example,” he said. “It does seem that we’re seeing more attacks on governments outside the U.S. The attacks on the country spurred help from NATO and other western governments. Pro-Russian hackers have attacked Lithuania, Germany, Italy, Romania, Norway and the U.S.,

Post cover
Image courtesy of "Reuters"

Montenegrin parties announce new majority to form government (Reuters)

Montenegrin parties that formed an alliance to win parliamentary elections in 2020 agreed on Friday to form a new government, following last month's ...

The Aug. I will pursue my policies from the opposition," he said. "This is a good opportunity to inform the president ...

Post cover
Image courtesy of "The Record by Recorded Future"

FBI and French officials arrive in Montenegro to investigate ... (The Record by Recorded Future)

The Record by Recorded Future gives exclusive, behind-the-scenes access to leaders, policymakers, researchers, and the shadows of the cyber underground.

Dukaj, meanwhile, claimed on Twitter that the exploit used to attack the country’s systems “cost $10 million.” The Montenegro government did not respond to requests for clarification. In recent days, they have attributed it to the criminal group behind the Cuba ransomware. “Cuba is unlikely to be Cuban. CAT team deployments are generally reserved for complex situations which require additional manpower and technical expertise,” said McPherson, who is now a senior vice president at the cybersecurity company ReliaQuest. [sent defensive cyber operators to Montenegro](https://therecord.media/cyber-command-sent-a-hunt-forward-team-to-help-lithuania-harden-its-systems/) as part of [hunt forward operations](https://therecord.media/cyber-command-deployed-hunt-forward-defenders-to-croatia-to-help-secure-systems/) and an effort to protect the 2018 midterm elections from foreign interference. [Experts from the French Agency for Information Systems Security (ANSSI)](https://twitter.com/mdukaj1/status/1565614065904492545) and members of a FBI Cyber Action Team (CAT) have been deployed to the country.

Post cover
Image courtesy of "Cyber Security Hub"

IOTW: FBI to investigate Montenegro cyber-attacks | Cyber Security ... (Cyber Security Hub)

The ransomware attacks that have targeted critical infrastructure have been linked to Russian ransomware.

[issued an official notice](https://www.ic3.gov/Media/News/2021/211203-2.pdf) saying that Cuba ransomware actors had “compromised at least 49 entities in five critical infrastructure sectors, including but not limited to the financial, government, healthcare, manufacturing and information technology sectors”. This is not the first time this year that government systems have been directly targeted by cyber-attacks. Officials have described the attacks as “unprecedented” and are believed by Montenegro’s National Security Agency (ANB) to be linked to Russian cyber criminal group using Cuba ransomware. Cuba ransomware actors use legitimate Windows processes in order to execute malware remotely by utilizing Windows admin privileges. Cuba ransomware is a malware family that was originally discovered in February 2020. The US Federal Bureau of Investigation (FBI) has said it will deploy Cyber Action Teams (CAT) to Montenegro in the wake of a series of “persistent and ongoing” cyber-attacks against the country’s infrastructure.

Explore the last week