Cyber attackers strike flood monitoring system in Goa, India

An abstract image showing a person trying to connect to a computer which has a large padlock attached to it, as a ghost wearing a fedora floats menacingly out of it and demands money
(Image credit: Shutterstock)

Cyber attackers have targeted a flood monitoring system with ransomware in Goa, India, demanding Bitcoin in return for decrypting the data.

The Water Resource Department (WRD) runs a flood monitoring system at 15 locations on Goa’s major rivers, designed to monitor water levels as part of its disaster management planning.

However, WRD executive engineer Sunil Karmarkar said the system was struck by a ransomware attack on June 21, taking place between 12am and 2am.

As a result, integrity of the system’s data was altered, preventing the ability to back up the previous data. According to Karmarkar, the server runs on a 24-7 internet line and an absence of antivirus protection and use of outdated firewalls helped facilitate the ransomware attack.

“The server has been under cyberattack of ransomware,” Karmarkar said in a report to authorities. “Under the attack, all the files are encrypted with eking extension and cannot be accessed.

“In a popup and stored file, the attackers are demanding Bitcoin cryptocurrency for the decryption of the data.”

In the aftermath, the flood monitoring system’s data could not be accessed or downloaded from the server, including data related to battery voltages of different stations.

Additionally, data packets regarding 12 of the flood system’s stations could not be transferred to the WIMS server, text messages and emails were unable to be obtained, and old data could not be backed up, Karmarkar added.

Police said they have asked representatives of Hyderabad-based software developer ASTRA Microwave Products being asked to help track down the culprits and better protect the flood monitoring system.

“This work has been awarded to ASTRA Microwave Products Ltd, Hyderabad,” Karmarkar revealed. “The company has been directed to block further damage and upgrade the system and recover the data at their own risk and cost.”

The attack is the latest example of cyber criminals that will attack any organisation and system with ransomware, regardless of its effect on people and society. While some groups such as Lockbit will veer away from targeting organizations such as hospitals and utilities, others – such as the notorious Conti ransomware attackers – are indiscriminate and will not take morals into consideration.

In the wake of the attack, prominent cybersecurity expert Kevin Beaumont took to social media to condemn the cyber criminals for targeting a critical safety system. He said on Twitter: “Whichever ransomware group did this should provide a free decryption key.”

Daniel Todd

Dan is a freelance writer and regular contributor to ChannelPro, covering the latest news stories across the IT, technology, and channel landscapes. Topics regularly cover cloud technologies, cyber security, software and operating system guides, and the latest mergers and acquisitions.

A journalism graduate from Leeds Beckett University, he combines a passion for the written word with a keen interest in the latest technology and its influence in an increasingly connected world.

He started writing for ChannelPro back in 2016, focusing on a mixture of news and technology guides, before becoming a regular contributor to ITPro. Elsewhere, he has previously written news and features across a range of other topics, including sport, music, and general news.

Read more
Tata Group's logo displayed at Tata Motors Ltd., dealership in Mumbai
Tata Technologies hit by ransomware attack
Cybersecurity concept image showing a warning symbol on a digitized display.
Personal data compromised in Gateshead Council cyber attack
Ransomware concept image showing digitized padlock pictured on a laptop screen on red background
February was the worst month on record for ransomware attacks – and one threat group had a field day
AWS logo on smartphon with blurred background
Hackers are turning Amazon S3 bucket encryption against customers in new ransomware campaign – and they’ve already claimed two victims
Atos logo pictured in blue lettering on one of its office in Zurich, Switzerland.
Atos hits back at ransomware attack claims
Ransomware concept image showing digitized padlock pictured on a laptop screen on red background
UK government officials consider banning ransomware payments
Latest in Ransomware
Ransomware concept image showing a warning symbol in red with binary code in background.
Healthcare systems are rife with exploits — and ransomware gangs have noticed
An abstract CGI image of a large green cuboid being broken in half with yellow, orange, and red cubes to represent ransomware resilience and data encryption.
Building ransomware resilience to avoid paying out
A hand on a keyboard in a dark room
Alleged LockBit developer extradited to the US
Ransomware concept image showing digitized padlock pictured on a laptop screen on red background
February was the worst month on record for ransomware attacks – and one threat group had a field day
Medusa statue bust on white background
CISA issues warning over Medusa ransomware after 300 victims from critical sectors impacted
Ghost in front of light with a silhouette on orange background
Warning issued over prolific 'Ghost' ransomware group
Latest in News
Ransomware concept image showing a warning symbol in red with binary code in background.
Healthcare systems are rife with exploits — and ransomware gangs have noticed
Application security concept image showing a digitized padlock placed upon a digital platform.
ESET looks to ‘empower’ partners with cybersecurity portfolio updates
Databricks logo and branding pictured on a MacBook Pro screen.
Databricks and Anthropic are teaming up on agentic AI development – here’s what it means for customers
Dell Technologies logo and branding pictured at the company's stall at Mobile World Congress (MWC) in Barcelona, Spain.
Scale of Dell job cuts laid bare as firm sheds 10% of staff in a year
Male employee sitting at a desk working on a laptop with earphones in and books scattered on desk.
Employees want purpose, and they’re willing to quit to find it – upskilling, career growth, and work-life balance have shifted priorities for workers
NHS logo displayed on a smartphone screen in white lettering on a blue background.
NHS supplier hit with £3m fine for security failings that led to attack