Oracle bug responsible for San Franciso hack
 

The attacker who infected servers and desktop computers at the San Francisco Metropolitan Transit Agency (SFMTA) with ransomware ogained access to the agency’s network by way of a known vulnerability in an Oracle WebLogic server.

That vulnerability is similar to the one used to hack a Maryland hospital network’s systems in April and infect multiple hospitals with crypto-ransomware. It appears that the hackers did not appear to have targeted SFMTA specifically. It was just spotted with a vulnerablity scan.

SFMTA spokesperson Paul Rose said that the agency became aware of a problem on 25 November. The ransomware encrypted some systems mainly affecting computer workstations.

http://www.techeye.net/news/oracle-b...-franciso-hack