Listen to 97.3 KIRO Newsradio: NOW! Seahawks vs. Raiders gameday coverage

Ransomware gang threatens to overthrow Costa Rica government

May 15, 2022, 8:49 PM | Updated: May 16, 2022, 5:29 pm
FILE - Presidential candidate Rodrigo Chaves greets supporters as he arrives to a polling station d...

FILE - Presidential candidate Rodrigo Chaves greets supporters as he arrives to a polling station during a presidential runoff election in San Jose, Costa Rica, April 3, 2022. Chaves, who won the election, declared a state of emergency over a ransomware attack as soon as he was sworn in early May 2022. (AP Photo/Carlos Gonzalez, File)

(AP Photo/Carlos Gonzalez, File)

SAN JOSE, Costa Rica (AP) — A ransomware gang that infiltrated some Costa Rican government computer systems has upped its threat, saying its goal is now to overthrow the government.

Perhaps seizing on the fact that President Rodrigo Chaves had only been in office for a week, the Russian-speaking Conti gang tried to increase the pressure to pay a ransom by raising its demand to $20 million.

Chaves suggested Monday in a news conference that the attack was coming from inside as well as outside Costa Rica.

“We are at war and that’s not an exaggeration,” Chaves said. He said officials were battling a national terrorist group that had collaborators inside Costa Rica.

Chaves also said the impact was broader than previously known, with 27 government institutions, including municipalities and state-run utilities, affected. He blamed his predecessor Carlos Alvarado for not investing in cybersecurity and for not more aggressively dealing with the attacks in the waning days of his government.

In a message Monday, Conti warned that it was working with people inside the government.

“We have our insiders in your government,” the group said. “We are also working on gaining access to your other systems, you have no other options but to pay us. We know that you have hired a data recovery specialist, don’t try to find workarounds.”

Despite Conti’s threat, experts see regime change as a highly unlikely — or even the real goal.

“We haven’t seen anything even close to this before and it’s quite a unique situation,” said Brett Callow, a ransomware analyst at Emsisoft. “The threat to overthrow the government is simply them making noise and not to be taken too seriously, I wouldn’t say.

“However, the threat that they could cause more disruption than they already have is potentially real and that there is no way of knowing how many other government departments they may have compromised but not yet encrypted.”

Conti attacked Costa Rica in April, accessing multiple critical systems in the Finance Ministry, including customs and tax collection. Other government systems were also affected and a month later not all are fully functioning.

Chaves declared a state of emergency over the attack as soon as he was sworn in last week. The U.S. State Department offered a $10 million reward for information leading to the identification or location of Conti leaders.

Conti responded by writing, “We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power, you have introduced an emergency.”

The gang also said it was raising the ransom demand to $20 million. It called on Costa Ricans to pressure their government to pay.

The attack has encrypted government data and the gang said Saturday that if the ransom wasn’t paid in one week, it would delete the decryption keys.

The U.S. State Department statement last week said the Conti group had been responsible for hundreds of ransomware incidents during the past two years.

“The FBI estimates that as of January 2022, there had been over 1,000 victims of attacks associated with Conti ransomware with victim payouts exceeding $150,000,000, making the Conti Ransomware variant the costliest strain of ransomware ever documented,” the statement said.

While the attack is adding unwanted stress to Chaves’ early days in office, it’s unlikely there was anything but a monetary motivation for the gang.

“I believe this is simply a for-profit cyber attack,” Callow, the analyst said. “Nothing more.”

__

Associated Press writer Christopher Sherman in Mexico City contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Associated Press

Small plane caught in power lines after crash, passengers OK

GAITHERSBURG, Md. (AP) — A small plane carrying at least two people got stuck in live power lines Sunday evening in Maryland, causing widespread power outages in the surrounding county as officials tried to extricate the aircraft. The Federal Aviation Administration said in a statement that the single-engine plane, which had departed White Plains, N.Y., […]
17 hours ago
FILE - Los Angeles Rams wide receiver Odell Beckham Jr. walks on the sideline during a NFL division...
Associated Press

NFL free agent Odell Beckham Jr. taken off plane in Miami

MIAMI (AP) — NFL free agent Odell Beckham Jr. was removed by police from an aircraft before takeoff at Miami International Airport after officials said he failed to respond to requests to buckle his seatbelt and appeared to be unconscious, police and airline officials said Sunday. “Fearing that Mr. Beckham was seriously ill, and that […]
17 hours ago
Associated Press

Landslide kills at least 14 at funeral in Cameroon’s capital

YAOUNDE, Cameroon (AP) — A landslide during a funeral ceremony in Cameroon’s capital on Sunday has left at least 14 people dead, the regional governor said. Dozens of others were missing as rescue crews dug through the rubble with flashlights. Centre Regional Gov. Naseri Paul Bea told the Cameroonian national broadcaster CRTV that the search […]
2 days ago
People gather at the capital's main square, the Zócalo, as they listen to Mexican President André...
Associated Press

Mexico’s López Obrador leads massive pro-government march

MEXICO CITY (AP) — Hundreds of thousands of people marched in Mexico’s capital Sunday in a show of support for President Manuel López Obrador, who before assuming the presidency had led some of the country’s biggest protests. The “people’s march” marked four years in office for the leftist leader and was a response to a […]
2 days ago
This photo provided by the U.S. Navy shows U.S. Navy Petty Officer 2nd Class Thomas James in Centur...
Associated Press

Colorado shooting victim ‘wanted to save the family I found’

COLORADO SPRINGS, Colo. (AP) — A member of the U.S. Navy who was injured while helping prevent further harm during a shooting at a gay nightclub in Colorado last weekend said Sunday that he “simply wanted to save the family that I found.” Petty Officer 2nd Class Thomas James made his first public comments on […]
2 days ago
Associated Press

NY sergeant hailed for aiding at 2017 birth helps at another

SHIRLEY, N.Y. (AP) — A group of police officers who helped deliver a baby at a Long Island home over the weekend included a sergeant who helped another newborn take his first breath five years ago. This time, Suffolk County Sgt. Jon-Erik Negron joined officers Conor Diemer, Jadin Rodriguez and Zachary Vormittag after a woman […]
2 days ago

Sponsored Articles

SHIBA WA...

Medicare open enrollment is here and SHIBA can help!

The SHIBA program – part of the Office of the Insurance Commissioner – is ready to help with your Medicare open enrollment decisions.
Lake Washington Windows...

Choosing Best Windows for Your Home

Lake Washington Windows and Doors is a local window dealer offering the exclusive Leak Armor installation.
Anacortes Christmas Tree...

Come one, come all! Food, Drink, and Coastal Christmas – Anacortes has it all!

Come celebrate Anacortes’ 11th annual Bier on the Pier! Bier on the Pier takes place on October 7th and 8th and features local ciders, food trucks and live music - not to mention the beautiful views of the Guemes Channel and backdrop of downtown Anacortes.
Swedish Cyberknife Treatment...

The revolutionary treatment of Swedish CyberKnife provides better quality of life for majority of patients

There are a wide variety of treatments options available for men with prostate cancer. One of the most technologically advanced treatment options in the Pacific Northwest is Stereotactic Body Radiation Therapy using the CyberKnife platform at Swedish Medical Center.
Work at Zum Services...

Seattle Public Schools announces three-year contract with Zum

Seattle Public Schools just announced a three-year contract with a brand-new company to the Pacific Northwest to assist with their student transportation: Zum.
Swedish Cyberknife 900x506...

June is Men’s Health Month: Here’s Why It’s Important To Speak About Your Health

According to the Centers for Disease Control and Prevention, men in the United States, on average, die five years earlier than women.
Ransomware gang threatens to overthrow Costa Rica government