{"id":11020,"date":"2017-10-24T00:00:00","date_gmt":"2017-10-24T00:00:00","guid":{"rendered":"http:\/\/localhost\/cyber-operations\/bad-rabbit\/"},"modified":"2017-10-24T00:00:00","modified_gmt":"2017-10-24T00:00:00","slug":"bad-rabbit","status":"publish","type":"post","link":"https:\/\/www.cfr.org\/cyber-operations\/bad-rabbit","title":{"rendered":"Bad Rabbit"},"content":{"rendered":"<p><span style=\"font-size:11.0pt;line-height:107%;,sans-serif;color:black\">Using a tool called Bad Rabbit, a threat actor launched a ransomware operation that encrypted data on networks in Bulgaria, Japan, Russia, Turkey, and Ukraine. The operation is believed to have disrupted the Kiev metro system&#8217;s payment network and delayed flights at Odessa&#8217;s airport. In October 2018, the United Kingdom <\/span><span class=\"MsoHyperlink\"><span style=\"font-size:11.0pt;line-height:107%;,sans-serif\"><a href=\"https:\/\/www.ncsc.gov.uk\/news\/reckless-campaign-cyber-attacks-russian-military-intelligence-service-exposed\">attributed<\/a><\/span><\/span><span style=\"font-size:11.0pt;line-height:107%;,sans-serif;color:black\"> this incident to Russian military intelligence.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Using a tool called Bad Rabbit, a threat actor launched a ransomware operation that encrypted data on networks in Bulgaria, Japan, Russia, Turkey, and Ukraine. The operation is believed to have disrupted the Kiev metro system&#8217;s payment network and delayed flights at Odessa&#8217;s airport. In October 2018, the United Kingdom attributed this incident to Russian [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_cloudinary_featured_overwrite":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2],"tags":[],"cyber_operation":[144],"state_sponsor":[141],"victim_category":[63],"victim_government_response":[186],"victim":[24,83,142,171,176],"class_list":["post-11020","post","type-post","status-publish","format-standard","hentry","category-incident","cyber_operation-sabotage","state_sponsor-russian-federation","victim_category-government","victim_government_response-unknown","victim-bulgaria","victim-japan","victim-russian-federation","victim-turkey","victim-ukraine"],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/comments?post=11020"}],"version-history":[{"count":0,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11020\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/media?parent=11020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/categories?post=11020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/tags?post=11020"},{"taxonomy":"cyber_operation","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/cyber_operation?post=11020"},{"taxonomy":"state_sponsor","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/state_sponsor?post=11020"},{"taxonomy":"victim_category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_category?post=11020"},{"taxonomy":"victim_government_response","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_government_response?post=11020"},{"taxonomy":"victim","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim?post=11020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}