Hacking,health and Security.

[paintedroom]

The implications for members here are clear and very worrying given the rise of reactionary forces the world over -

http://www.independent.co.uk/news/uk/home-news/nhs-hack-wanna-decryptor-ransomware-what-is-it-how-does-it-work-computer-a7733141.html

[Jim Allen]

Been getting a few emails on this since yesterday ... 

Truth is this form of ransomware is increasingly common it really kicked off in 2009 Trojan:W32 or knows as Agent.AF it hit the consumer market hard.
The first versions had fake "FBI or Law enforcement" warnings asking for payments due to fines to unlock PC's and consumer laptops.

Big first wave was from legitimate adds that had been infected causing a "drive by download" otherwise secure  & legit site that had 3rd party adds that had been infected would drop the initial payload onto the target pc. Since 2009 its branched into the common manners.

Another variant pretended to be security software often made to look like real brand named products so it could pretend to scan and lock the PC for protection - asking a "fee" to clean the PC.

I remember working with the first tools to clean the PC's from infected people truly, nasty nasty bug. 

Various versions and with that function since have been out there limiting compromised computers, CryptoLocker is a ransomware variant where malware often encrypts files and sometimes deletes the original copy. The attacker requests a ransom for the files to be unencrypted. Not only are files on the local computer damaged, but also the files on any shared or attached network drives/server to which the computer has write access.

Not much can be done, remove the virus by someone who knows what they are doing and restore the damaged files from a back-up, than prevention is the key and educating staff - One thing companies and serves can not afford to be cheap with is security and back-ups.

Jim

[paintedroom]

Thanks Jim,i forgot you were a tech professional..great to have access to you now and forever

More specifically i am somewhat concerned about the Irish set up.Where i`m being treated didnt require full name and address so i didnt offer it.Somewhat later i think i did.I guess it wouldnt be too unreasonable to ask them to remove it given the circumstances.
It may seem a bit paranoid to some that this attitude is warranted at all.. but i hate surprises.

[Jim Allen]

So to be honest this type of attack is not a risk to personal or medical data being leaked ... All it does is encrypt it, its not exporting the data outside the computer or servers affected. No need to panic. 

If you are concerned about data in Ireland, all breaches are such as this are reported. In Ireland our systems in the HSE are not linked to each other GP/Labs to Hospitals its one of the areas the HSE want to upgrade soon, but in the mean time if the GP's laptop gets hacked, it remains just a GP concern so limited impact.

The NHS has been hit by a self replicating virus that spread yesterday (Thursday it started) through the connected systems. 

The bigger threat in any company as a whole and doctors  is employees and taking data home, printing stuff and leaving Hard copies out and not encrypted laptops/ "USB or storage devices" .

Hospitals in particular are vulnerable in Ireland but its more to do with the paper and local copies that are concerns.  We are so ff out of date even the hackers can't hack it 

Jim

[Jim Allen]

Thanks Jim,i forgot you were a tech professional..

I used to work for global company they write the codes on the viruses. Including this virus, I actually work next to a additional secured VIP room that is used 24/7 - 365 days to track digital virus outbreaks globally. 

[Jim Allen]

Here is the consumer note on this bug (took me a moment to find it, i knew it had been published)

https://www.symantec.com/connect/blogs/what-you-need-know-about-wannacry-ransomware

[Wade]

Scary, weird shit...

[paintedroom]

You`re a bloody marvel Jim.That just saved me endless head scratching and a powerful impulse to hit things with a shovel.Now,i have a toaster that seems..

[Jim Allen]

End of the day, if a hacker really wants to hack your laptop (why?) or even whatever you have in the cloud - They will. Its that simple.

However not making yourself a target for drive by attacks by keeping your OS updated, passwords unique, security software to date, encrypting our gadgets  and keeping a backup.

Biggest tip is backup if its important, so not cock pictures or bank statements but stuff you really need like pictures from fam or loved ones you keep on file - backup, and if it happens having that stuff ready to be restored is all that really matters, so backed-up is key.

Jim