Government of Montenegro confirms ransomware attack, Cuba ransomware group claim responsible

On Wednesday 31st of August 2022, the government of Montenegro confirmed that ransomware was responsible for the damage and disruptions that have impacted its critical infrastructure. Public Administration Minister Maras Dukaj stated on local television that an organised cybercrime group was behind the attack. The minister was quoted saying that a “special virus” is used in the attack and there is a ransom demand of $10 million.

Minster Maras Dukaj highlighted that the state could not give an estimate of when the services will become available as the effects of the incident enter the tenth day. Originally, ministers of Montenegro had stated that they had enough evidence to suspect the cyberattacks were directed by Russian services. But the Cuba ransomware gang have listed the Parliament of Montenegro (Skupstina) as its victim and claimed to have stolen financial documents, correspondence with banks, balance sheets, tax documents, compensation, and even source code.