{"id":2609,"date":"2023-02-24T15:19:51","date_gmt":"2023-02-24T15:19:51","guid":{"rendered":"https:\/\/alma.loadingediciones.cl\/dev\/?p=2609"},"modified":"2023-11-24T13:03:46","modified_gmt":"2023-11-24T13:03:46","slug":"the-guardians","status":"publish","type":"post","link":"https:\/\/alma.loadingediciones.cl\/dev\/the-guardians\/","title":{"rendered":"The guardians of the network"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”4.17.4″ _module_preset=”default” custom_padding=”30px|||||” global_colors_info=”{}”][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” min_height=”143.8px” custom_margin=”|auto|6px|auto|false|false” custom_padding=”||1px|||” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_text admin_label=”Text” _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” custom_padding=”||0px||false|false” global_colors_info=”{}”]It has been almost four months since we suffered a cyber-attack on our computer system. An emergency that has undoubtedly had an impact on our operations. However, we have now recovered from that event<\/strong>. <\/p>\n

After 48 days of hard work by our IT team, on December 19 we resumed our astronomical observations. And more recently, on January 26 it was made public that the FBI infiltrated the group that attacked us<\/strong>, dismantling their operations and obtaining the decryption keys.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” min_height=”94.8px” custom_margin=”|auto|6px|auto|false|false” custom_padding=”||1px|||” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_button button_url=”https:\/\/www.justice.gov\/opa\/video\/us-department-justice-disrupts-hive-ransomware-variant” button_text=”Click here to see that story:” button_alignment=”center” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_button][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/WhatsApp-Image-2023-02-27-at-6.58.33-PM-e1677536428449.jpeg” title_text=”WhatsApp Image 2023-02-27 at 6.58.33 PM” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]It all started in the early morning of last October 29. “At 7:30 AM I received a call from my colleague Jos\u00e9 Lobos, who was reporting access problems in the observation control servers. When I started the investigation I received another problem call from Santiago and both problems turned out to have the same cause,” recalls Gast\u00f3n V\u00e9lez, IT systems administrator<\/strong>.[\/et_pb_text][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/GVELEZ_Photo-1-1-scaled-e1677250643930.jpg” title_text=”GVELEZ_Photo (1)” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/WhatsApp-Image-2023-02-27-at-6.58.33-PM-2-e1677536056133.jpeg” title_text=”WhatsApp Image 2023-02-27 at 6.58.33 PM (2)” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]The hackers attacked in the middle of a holiday, taking advantage of the fact that there were fewer people to respond, and asked ALMA to buy decryption software sold by them. Not only was their request not granted, but our IT team immediately reacted by isolating the systems from each other to prevent the attack from spreading.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]<\/p>\n

The infiltration affected support systems such as Jira, Confluence and DNS, but the scientific data was not affected<\/strong>. The balance was about 400 virtual machines that had to be rebuilt from scratch. A reinstallation and infrastructure configuration process that usually takes five years, our IT team accomplished in less than three months.<\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/WhatsApp-Image-2023-02-10-at-4.58.23-PM-1.jpeg” title_text=”WhatsApp Image 2023-02-10 at 4.58.23 PM (1)” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/Nico-Ovando-1-1.png” title_text=”Nico Ovando (1) (1)” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]”They were months of continuous hard work, late nights, uncertainty, stress and fatigue, to finally begin to achieve the goal of recovering the affected systems,” says Nicol\u00e1s Ovando, IT systems administrator<\/strong>.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]And that work is not over yet. Before the attack, we were not used to using security processes such as two-factor authentication or more complex passwords.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”2_3,1_3″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”2_3″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]”Day-to-day life, both for us and for the users, has become a bit heavier,” says Victoria Reyes, part of the IT support team<\/strong>. [\/et_pb_text][\/et_pb_column][et_pb_column type=”1_3″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/Victoria-Reyes-e1677251479661.jpg” title_text=”Victoria Reyes” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”left” global_colors_info=”{}”]Even so, at JAO we continue to work to update and safeguard our IT system in response to the new times.<\/p>\n

“This period after the cyber-attack has been exhausting for us. We are working day by day to return to normality and we hope that this goal will be achieved soon,” Victoria closes.[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_text _builder_version=”4.19.1″ _module_preset=”default” text_text_color=”#000000″ text_orientation=”center” global_colors_info=”{}”]We thank Christian Sald\u00edas and \u00cdtalo Lemus for the pictures. [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/alma.loadingediciones.cl\/dev\/wp-content\/uploads\/2023\/02\/WhatsApp-Image-2023-02-27-at-6.58.33-PM-3-e1677536634265.jpeg” title_text=”WhatsApp Image 2023-02-27 at 6.58.33 PM (3)” _builder_version=”4.19.1″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n

<\/span><\/div>","protected":false},"excerpt":{"rendered":"

It has been almost four months since we suffered a cyber-attack on our computer system. An emergency that has undoubtedly had an impact on our operations. However, we have now recovered from that event. After 48 days of hard work by our IT team, on December 19 we resumed our astronomical observations. And more recently, […]<\/p>\n

<\/span><\/div>","protected":false},"author":5,"featured_media":2613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[3],"tags":[17],"class_list":["post-2609","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-alma","et-has-post-format-content","et_post_format-et-post-format-standard"],"_links":{"self":[{"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/posts\/2609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/comments?post=2609"}],"version-history":[{"count":15,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/posts\/2609\/revisions"}],"predecessor-version":[{"id":4158,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/posts\/2609\/revisions\/4158"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/media\/2613"}],"wp:attachment":[{"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/media?parent=2609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/categories?post=2609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/alma.loadingediciones.cl\/dev\/wp-json\/wp\/v2\/tags?post=2609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}