Malware attack hits city of Oak Ridge

March 29, 2023 by Ben Pounds

The city of Oak Ridge reportedly sustained a malware attack last week.

The announcement came by email Wednesday, March 23, but details were scarce. The email stated the city suffered “network issues.”

“The city and its Information Systems Department are working with law enforcement to investigate as well as technical specialists experienced in cyber recovery services to restore services as quickly as possible,” the official city email stated.

People can still contact Oak Ridge Police and Fire departments at 911 for emergencies and at 865- 425-4399 for non-emergencies. Those needing assistance with starting or reconnecting utility services may call 865- 425-3400.

Lauren Gray, senior communications specialist for the city of Oak Ridge, declined to give further information, and as of Friday had not provided any additional updates by email or the city’s social media accounts. However, she said the city will share more information as it becomes available.

Malware, which comes from “malicious software” is a term to describe programs that can disrupt computers, clients, servers or networks.

George Meghabghab, professor of Computer Sciences, Mathematics and Science and leader of a cybersecurity summer camp at Roane State Community College gave some context in an interview. He is not affiliated with the city of Oak Ridge, but rather spoke of malware generally.

He said malware strains that are based in cloud storage rather than servers were able to hide their true natures more easily.

“They wear clothes that don’t reveal them much,” he said. “Attackers are becoming smarter and becoming more patient.”

Regarding local governments, he said he knew of malware attacks on other cities in Texas and Maryland, but this was the first time he’d heard of one hitting a Tennessee town’s government. He said malware can make it difficult to access networks.

“Don’t trust anyone downloading or telling you to download anything on your computer,” he said when asked for advice on avoiding malware adding that cloud based programs are likely to be malware.

He said larger networks like the city of Oak Ridge have an easier time dealing with malware than smaller personal computers. With a larger network, he said, you can isolate the part of the network that was affected.

“Hopefully the people in Oak Ridge have learned,” he said regarding the recent attack. “You build knowledge base from one attack to another.”