[SES1066]

Without any specific knowledge, I’ll wager that a lower-level city associate (employee or contractor) with too much access to the system, opened a link to permit the attack. What is needed is a sandbox scheme that can isolate such attacks. The rewards to the criminals who are almost always offshore are too high to stop these attacks. All it takes is a single weak link!

[fireman15]

I’ll wager that a lower-level city associate (employee or contractor) with too much access to the system, opened a link to permit the attack.

Blaming the victim for malware is an out dated concept. These days you do not have to open a link to get malware. Legitimate sites become corrupted every day. There could easily be no malfeasance or carelessness at all by an employee or contractor for the city that contributed to this issue.

[paulcissa]

Without any specific knowledge, I’ll wager that a lower-level city associate (employee or contractor) with too much access to the system, opened a link to permit the attack. What is needed is a sandbox scheme that can isolate such attacks. The rewards to the criminals who are almost always offshore are too high to stop these attacks. All it takes is a single weak link!

The human will always be the single weakest link. The report states a broad-spectrum phishing attack. Stupid human tricks.