Tribune Media was hit by a major ransomware attack on 29 December. Chicago Tribune, New York Daily News, Chicago Tribune and Wall Street Journal among those affected. Ransomware attacks have been linked to North Korea on the basis of similarities with the ‘Ryuk’ attack. The tenuous nature of attribution, and the similarity between targeted and targeted attacks, arguably makes the focus on exactly which bit of malware was used a bit of a red herring. If an organisation is vulnerable to one kind of targeted ransomware group, it’s probably vulnerable to more than one, and youre going to read about whichever attacker found the victim first.”]
Source: https://nakedsecurity.sophos.com/2019/01/03/us-newspapers-battle-ransomware/