Trucks loaded with containers are lined up outside a terminal at the Jawaharlal Nehru Port Trust in Mumbai, India, on Thursday. Operations at a terminal at India’s busiest container port were stalled by the malicious software that suddenly burst across the world’s computer screens Tuesday. (AP Photo/Rajanish Kakade)

Trucks loaded with containers are lined up outside a terminal at the Jawaharlal Nehru Port Trust in Mumbai, India, on Thursday. Operations at a terminal at India’s busiest container port were stalled by the malicious software that suddenly burst across the world’s computer screens Tuesday. (AP Photo/Rajanish Kakade)

Cyberattack may not have been meant to get money

By Raphael Satter and Jan M. Olsen / Associated Press

PARIS — The dramatic data-scrambling attack that hit computers around the world Tuesday appears to be contained. But with the damage and disruption still coming into focus, security experts worry the sudden explosion of malicious software may have been more sinister than a criminally minded shakedown of computer users.

“There may be a more nefarious motive behind the attack,” Gavin O’Gorman, an investigator with U.S. antivirus firm Symantec, said in a blog post. “Perhaps this attack was never intended to make money (but) rather to simply disrupt a large number of Ukrainian organizations.”

The rogue program initially appeared to be ransomware, a fast-growing and lucrative breed of malicious software that encrypts its victims’ data and holds it hostage until a payment is made.

But O’Gorman was one of several researchers who noted that any criminals would have had difficulty monetizing the epidemic given that they appear to have relied on a single email address that was blocked almost immediately and a single Bitcoin wallet that, to date, has collected the relatively puny sum of $10,000.

Others, such as Russian anti-virus firm Kaspersky Lab, said that clues in the code suggest the program’s authors would have been incapable of decrypting the data in any case, adding further evidence that the ransom demands were a smoke screen.

The timing was intriguing too: The malware explosion came the same day as the assassination of a senior Ukrainian military intelligence officer and a day before a national holiday celebrating a new constitution signed after the breakup of the Soviet Union.

Ransomware or not, computer specialists worldwide were still wrestling with its consequences, with varying degrees of success.

Danish shipping giant A.P. Moller-Maersk, one of the global companies hardest hit by the malware, said Thursday that most of its terminals are now operational, though some terminals are “operating slower than usual or with limited functionality.”

Problems have been reported across the shippers’ global business, from Mobile, Alabama, to Mumbai in India. When The Associated Press visited the latter city’s Jawaharlal Nehru Port Trust on Thursday, for example, it witnessed several hundred containers piled up at just two yards, out of more than a dozen yards surrounding the port.

“The vessels are coming, the ships are coming, but they are not able to take the container because all the systems are down,” trading and clearing agent Rajeshree Verma told the AP. “The port authorities, they are not able to reply (to) us. The shipping companies they also don’t know what to do. … We are actually in a fix because of all this.”

Moller-Maersk is one of dozens of major corporations and government agencies — from FedEx subsidiary TNT to Ukraine’s banking system — to have had its services disrupted by the malware epidemic.

Even small businesses otherwise unaffected by the malware are beginning to feel the pain.

Steffan Mastek of Petersen & Soerensen, a small Danish ship repair company, said he had been forced to re-order engine parts because TNT’s track-and-trace system for parcels was down.

“We had to re-order the parts that need to be fitted to a ship engine and that has to be done by Friday when the ship has to be returned,” Mastek said.

The extent and costs of the damage in Ukraine remains unclear, although on the streets of Kiev, the capital, life appears largely back to normal. Cash machines that had spent the past two days offline were back dispensing money and the capital’s airport, which had to switch information panels to manual mode for the past two days, is back to displaying flights automatically.

Olsen reported from Copenhagen. Manish Mehta in Nhavasheva, India, and Vladimir Isachenkov in Moscow contributed to this report.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Olivia Vanni / The Herald 
The Mukilteo Lighthouse. Built in 1906, it’s one of the most iconic landmarks in Snohomish County.
The Mukilteo Lighthouse. Built in 1906, it’s one of the most iconic landmarks in Snohomish County. (Olivia Vanni / The Herald)
Mukilteo mayor vetoes council-approved sales tax

The tax would have helped pay for transportation infrastructure, but was also set to give Mukilteo the highest sales tax rate in the state.

South County Fire plans push-in ceremony for newest fire engine

Anybody who attends will have the opportunity to help push the engine into the station.

Marysville Mayor Jon Nehring gives the state of the city address at the Marysville Civic Center on Wednesday, Jan. 31, 2024, in Marysville, Washington. (Ryan Berry / The Herald)
Marysville council approves interim middle housing law

The council passed the regulations to prevent a state model code from taking effect by default. It expects to approve final rules by October.

x
State audit takes issue with Edmonds COVID grant monitoring

The audit report covered 2023 and is the third since 2020 that found similar issues with COVID-19 recovery grant documentation.

Bothell
Bothell man pleads guilty to sexual abuse of Marysville middle schoolers

The man allegedly sexually assaulted three students in exchange for vapes and edibles in 2022. His sentencing is set for Aug. 29.

Larsen talks proposed Medicaid cuts during Compass Health stop in Everett

Compass Health plans to open its new behavioral health center in August. Nearly all of the nonprofit’s patients rely on Medicaid.

Position 1 candidates prioritize public safety, differ on tax increases

Derica Escamilla is looking to retain her seat against challengers Dio Boucsieguez and Brandon Kimmel.

Community members gather for the dedication of the Oso Landslide Memorial following the ten-year remembrance of the slide on Friday, March 22, 2024, at the Oso Landslide Memorial in Oso, Washington. (Ryan Berry / The Herald)
The Daily Herald garners 6 awards from regional journalism competition

The awards recognize the best in journalism from media outlets across Alaska, Idaho, Montana, Oregon and Washington.

on Monday, July 14, 2025 in Edmonds, Washington. (Olivia Vanni / The Herald)
Mini heat wave moving into Snohomish County

The National Weather Service has issued a heat advisory, warning of temperatures climbing to mid-80s or low 90s Tuesday and Wednesday.

Snohomish County Dahlia Society members Doug Symonds and Alysia Obina on Monday, March 3, 2025 in Lake Stevens, Washington. (Olivia Vanni / The Herald)
How to grow for show: 10 tips for prize-winning dahlias

Snohomish County Dahlia Society members share how they tend to their gardens for the best blooms.

State Attorney General Nick Brown's office posted a release announcing $720 million in nationwide settlements with eight drugmakers that manufactured opioid pills and worsened the nationwide opioid crisis. The state could receive more than $16 million, the release said. (Ryan Berry/Washington State Standard)
Snohomish County to receive portion of latest $16M opioid settlement

While the amount of money is still unknown, funding plans are already in place to help with drug abuse prevention, treatment and education.

District 2 candidates differ in public safety approach

Incumbent Paula Rhyne is facing challenger Ryan Crowther. The third candidate, Jonathan Shapiro, is no longer seeking the seat.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.