UK NHS cyber attack

[techy_pcbuilder]

The NHS (UK's national health service has suffered a potential cyber attack: http://www.bbc.co.uk/news/health-39899646

[Billy_Mays]

9 minutes ago, techy_pcbuilder said:

The NHS (UK's national health service has suffered a potential cyber attack: http://www.bbc.co.uk/news/health-39899646

Why do people do this all it will do is get you in jail. Idiots 

[weed]

Just now, techy_pcbuilder said:

The NHS (UK's national health service has suffered a potential cyber attack: http://www.bbc.co.uk/news/health-39899646

wow, just imagining how many patients are critically ill right now and the NHS cant get their details, spooky, you could be dying and you wont be able to get any help 

[techy_pcbuilder]

A very scary situation.

[laminutederire]

To be fair that kind of organisation have somewhat serious attacks each day or each two days 

[Falconevo]

Looks like someone paid the ransom this afternoon, this is going off the article the BBC have with the screenshot present.

 

https://blockchain.info/address/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
 

As for the attack itself, likely a domain user with privileges higher than they should of had opening an unsolicited email attachment.

 

File Clusters and shares etc would of got nuked and affected any system the end user had domain privs to.

This is why people should use technologies such as AppLocker and implement very strict rule sets on Access Protection to the environment with any protecting AV software.

[Cela1]

Sick bastards. Don't hold people's health hostage.

[mynameisjuan]

Why are people such assholes? Like people can actually die over this.

[Evanair]

4 minutes ago, mynameisjuan said:

Why are people such assholes? Like people can actually die over this.

Simple. Can you name one other company you know will pay you as fast as possible? 

 

Think of how bad the PR would be if they didn't pay it and someone died.

[Teddy07]

19 minutes ago, Billy_Mays said:

Why do people do this all it will do is get you in jail. Idiots 

Maybe it was just a byproduct and not the main target?

[Guest]

22 minutes ago, Billy_Mays said:

Why do people do this all it will do is get you in jail. Idiots 

Jail time is easy time for some people. 

 

And for those people, in the present, the reward outweighs the possible consequences 

[TAHIRMIA]

Well although it's really bad, it's kinda cool that someone just brought down one of the largest health providers in the world

[vorticalbox]

12 minutes ago, Cela1 said:

Sick bastards. Don't hold people's health hostage.

tbf it is probably a wild virus rather than a targeted attack. 

 

edit from the article

 

Quote

NHS Digital said the ransomware attack was not "specifically targeted at the NHS" and was affecting other organisations.

 

[WMGroomAK]

42 minutes ago, techy_pcbuilder said:

The NHS (UK's national health service has suffered a potential cyber attack: http://www.bbc.co.uk/news/health-39899646

So, this is a massive ransomware that is going around under the title of WCry v2.0 that appears to have been detected about half a day ago...  Unfortunately, it's not just affecting NHS, but appears to having a global impact and they have yet to trace the source or transmission method of it.

 

https://www.bleepingcomputer.com/news/security/telefonica-tells-employees-to-shut-down-computers-amid-massive-ransomware-outbreak/

 

Quote

A ransomware outbreak is wreaking havoc all over the world, but especially in Spain, where Telefonica — one of the country's biggest telecommunications companies — has fallen victim, and its IT staff is desperately telling employees to shut down computers and VPN connections in order to limit the ransomware's reach.

 

The culprit for these attacks is v2.0 of the WCry ransomware, also known as WannaCry or WanaCrypt0r ransomware. For those affected, you can discuss this ransomware and receive support in the dedicated WanaCrypt0r & Wana Decrypt0r Help & Support Topic.

 

WCry ransomware explodes in massive distribution wave

Version 1.0 of this ransomware was discovered by Malwarebytes researcher S!Ri on February 10 and then spotted in a brief campaign on March 25 by GData security researcher Karsten Hahn.

 

Version 2.0 was detected for the first time around four hours ago by independent security researcher MalwareHunter. The security researcher says the ransomware came out of nowhere and started spreading like wildfire.

 

In these first four hours, WCry 2.0 made more victims than Jaff, a ransomware spotted this week distributed via the Necurs botnet, the former home of the Locky ransomware. In numbers, in just four hours WCry made 1.5 times more victims than Jaff did all week.

 

Currently, researchers weren't able to pinpoint the exact origin of the WCry distribution campaign. At the moment, it could be from malvertising, exploit kits, email spam, or hand-cranked RDP attacks

Ars Technica is planning to do an update of this topic as they develop a clearer idea of what has gone on...

 

https://arstechnica.com/information-technology/2017/05/nhs-ransomware-cyber-attack/

 

As for the Spain ransomware attacks, @SpaceGhostC2C has a thread with a lot more details on it...

 

[TAHIRMIA]

I just heard from a friend who works at the NHS that medical data was breached, Idk to what extent and at what point of the attack but some or most of the countries medical records are probably going to be available soon.

[porina]

I was only at my doctors for a routine appointment earlier today, so people at work have been joking what have I been doing in there...

 

For data this critical, I'm both surprised and also not surprised it is that vulnerable, since that would imply they had a level of competence this is now obviously not there. Even if they had recent backups, filling in the gaps is not going to be trivial.

 

At best, this will serve as a wake up call for all organisations to beef up defences and working procedures.

[DoctorZeus]

should have had

[Master Disaster]

Just an FYI, its reported very recently that the NHS isn't the only organisation that's been hit today, apparently its been a world wide coordinated attack.

[TAHIRMIA]

2 minutes ago, Master Disaster said:

Just an FYI, its reported very recently that the NHS isn't the only organisation that's been hit today, apparently its been a world wide coordinated attack.

But for something as important to the country as this, they should have more security and protection plans if this stuff happens

[NunoLava1998]

 

[vanished]

To be honest I'm surprised something terrible hasn't happened sooner, and more often, to any number of countries.  The sad fact is governments and even many large important companies seriously cheap out on IT, even through it's not even a significant expense when done right, and the consequences end up being 1000x worse than just paying the cost of having secure and reliable systems.  Things being leaked, stolen, lost, etc. is going to just continue happening until people learn the importance of listening to the people who know how to do their job properly, instead of firing them for being too expensive.

[TAHIRMIA]

19 minutes ago, NunoLava1998 said:

 

 

What site was the screenshot from?

[NunoLava1998]

Just now, TAHIRMIA said:

What site was the screenshot from?

https://cybermap.kaspersky.com

[TAHIRMIA]

15 minutes ago, Ryan_Vickers said:

To be honest I'm surprised something terrible hasn't happened sooner, and more often, to any number of countries.  The sad fact is governments and even many large important companies seriously cheap out on IT, even through it's not even a significant expense when done right, and the consequences end up being 1000x worse than just paying the cost of having secure and reliable systems.  Things being leaked, stolen, lost, etc. is going to just continue happening until people learn the importance of listening to the people who know how to do their job properly, instead of firing them for being too expensive.

 

I agree, A lot of hospitals still use Windows XP and only a few I have seen on W7

[vanished]

1 minute ago, TAHIRMIA said:

I agree, A lot of hospitals still use Windows XP and only a few I have seen on W7

While that is both unsurprising and highly disturbing, it's also barely the tip of the iceberg.  There's so much to having a good system beyond just choice of OS, and it so often is so far from what they actually implement it's not even funny