7 ms·
Spain's hospital IT systems under “massive attack” (in Spanish)
- luckydata 7y agoyou gotta be a special kind of piece of crap to do that now
- theschmed 7y agoDisregard for human life seems to be a pattern of online lulz. I mean, this is on a different scale from "SWATTING" but the same sociopathy, no?
- revel 7y agothis is much more likely to be a malicious state actor than uncoordinated attacks by random internet idiots
- jmole 7y agoransomware is not a typical attack from a state actor
- TomMarius 7y agoHow do you know it's not ths Chinese or North Koreans looking for bitcoins? It is documented they do transact in bitcoin on the hacking market a lot.
- sterlind 7y agoNotPetya had ties to Russian intelligence, and WannaCry had ties to North Korea. Not saying this is a state actor, just pointing out ransomware is just another tool for them.
- drusklo 7y agoWhy not both?, using a tactic common among criminals to destabilize the healthcare system and hence the economy
- pavelrub 7y agoHow is this "much more likely to be a malicious state actor"? There is literally nothing about this attack that indicates a state actor.
- IAmEveryone 7y agoIt’s likely to be a “state actor” for the same reason people like to use the term “state actor”: it’s so much more exciting than the alternative.
- Symmetry 7y agoBeing angry at a particular person and wanting to get them killed is really bad but it's something a lot of people are capable of. Getting a bunch of random people killed to make a quick buck is different.
- deleted 7y ago[deleted]
- mcs_ 7y agoIn some cases, people with no hope is used to execute wrong commands. As humanity, we have seen in the past military actions against people without weapons (killing them at times). I do not think the issue is them trying to do bad things, and maybe the point is we are living in a world where there are many more borderlines that are easily recruitable for some dollars.
- celticninja 7y agodue to the significant danger posed to the lives of so many I hope they are caught and severely punished. this is not the type of person that you can rehabilitate.
- IAmEveryone 7y ago“Rehabilitation” isn’t the opposite of “punishment”. In fact punishment is part of the process of rehabilitation. If, as you say, rehabilitation is impossible, punishment would be illegitimate. Because we don’t harm people just to satisfy our thirst for revenge.
- jfkebwjsbx 7y agoYou have it backwards. The punishment is must be there as a deterrent, regardless of the possibility of rehabilitation. Otherwise nobody would care whatever a judge decides.
- kbenson 7y agoRehabilitation does not necessarily require punishment, and there are reasons for punishment that are not based on rehabilitation. It is possible for someone to be rehabilitated on their own as they change, or through someone taking action that is not punishment (explaining the impact of the actions which the person may not have been thinking of, etc). It's possible to punish someone with no thought as to rehabilitation. Capital punishment is this. The purpose is not to benefit the person in any way, but to benefit society by providing a negative example to others so they don't attempt the same actions (it doesn't matter if you believe it works, this is the purpose it's done).
- celticninja 7y agoI would suggest prison as a way of preventing them from doing it again. not to harm them but to prevent them from causing harm.
- threatofrain 7y agoIs this an individual? Or a team working for an institution?
- pjc50 7y agoI have a horrible suspicion that the attacks are continuous and ongoing, but the high stress levels of the present situation make it easier for people to click on the wrong email or link on their XP hospital PCs.
- agumonkey 7y agothere will be a special lesson after this, because we're in a wide global stress and indeed, when something is overloaded, other issues are felt deeper. It's also a time when people can act foolish and be tempted to be antisocial, so more stupid hacks, more angry people, or even more dormant ennemies trying to benefit.
- pjc50 7y agoAccident analysts call this "cascade failure". Something goes wrong, and the safety system intended to deal with it is also broken.
- ancarda 7y agoThe current top comment (https://news.ycombinator.com/item?id=22665562 https://news.ycombinator.com/item?id=22665562) has a translation that mentions the email containing the virus was about COVID-19 Do not defend the pieces of shit that launch attacks during a pandemic.
- threatofrain 7y agoI doubt this simply a shitty person as opposed to a military action by funded institutions.
- netsharc 7y agoWhat's with this conspiracy theory? The average person can pull this shit off, why do you have to "believe" that it's something "funded institutions" (do you not even dare write "state sponsored"?)? What world view do you have that you'd rather have it be a state rather than shitty people? So you can think "$ENEMY_STATE is so fucking evil"? Maybe it's 1 person, maybe it's organized criminals, do they count as "funded institutions"? Maybe it's a state... but well if you have beliefs, you gotta have the evidence!
- czechdeveloper 7y agoWe recently (during corona crisis) had attach on strategic Czech hospital too.
- WrtCdEvrydy 7y agoDo you have some sort of contact I could reach out for an interview on this?
- vanous 7y agoAnd, because nation wide state of emergency has been declared few weeks ago, even small law breaking stuff is a crime. So people running these bot networks might not have realized that if caught, penalty can easily be 10x the usual rate.
- Giornito 7y agoI expect similar issues at a grander scale to occur in the US if things get to the same level as we see in my home Italy.
- duxup 7y agoI'm not sure an IT attack is a sure fire thing that goes along with healthcare use.
- khafra 7y agoIf it's not just utterly sociopathic organized crime, it could be one of the many, many people whose loved ones had to be taken off life support because of insufficient medical supplies and personnel. I can't imagine that most people would respond this way, but it only takes one or two unreasonably angry people with the right skillset.
- _jal 7y agoNot the GP, but I think they were getting at US facilities being a somewhat more attractive target than Italy's. This is due to both political reasons and simply having more healthcare targets to go after.
- duxup 7y agoPossibly more attractive, although ransomware folks seem to like soft targets. US healthcare is hardly a panacea of security, but they do put resources into IT. Most of the ransomware targeting seems to be seeking out softer targets, underfunded, etc. I'm not sure US healthcare is immune, but I'm also not sure they're as obvious a target as far as being easy to break into / likely to get a payout.
- GonzaloQuero 7y agoSon of a bitch, how can humanity sink so low with such ease?
- fnord123 7y agoThere are also cyber attacks on food delivery companies: https://twitter.com/jitsegroen/status/1240332307262832642 https://twitter.com/jitsegroen/status/1240332307262832642
- dillonmckay 7y agoIn all honesty, I think food delivery companies are part of the problem.
- birdyrooster 7y agoit’s better to have a few couriers to many people than many people mingling with many people at restaurants. It’s like logarithmic or linear versus quadratic or exponential spread.
- gallegojaime 7y agoYou mean this from a security perspective in their services?
- TheHypnotist 7y agoProbably in terms of being potential carriers spreading the disease to the quarantined? I imagine there is a risk there.
- samstave 7y agohttps://en.wikipedia.org/wiki/Travelling_salesman_problem https://en.wikipedia.org/wiki/Travelling_salesman_problem We need a "travelling delivery-carrier problem" model, which should be similar to TTSP... "Whats the maximum number of infection interactions a delivery driver can cause during a pandemic"
- deleted 7y ago[deleted]
- duxup 7y ago
- Havoc 7y agoAnd in Germany people were sabotaging ambulance tires. WTF is wrong with people
- superzamp 7y agoProbably, and maybe hopefully, crackpots trying to maximize chaos to push their own impaired agenda.
- deckiedan 7y agoand in the UK: https://www.kentonline.co.uk/thanet/news/holes-drilled-in-tyres-as-six-ambulances-attacked-224229/ https://www.kentonline.co.uk/thanet/news/holes-drilled-in-ty...
- Zhyl 7y agoIn all seriousness, this could potentially be tried as attempted murder.
- intsunny 7y agoLink?
- Havoc 7y agoDon’t recall where I saw it - last couple days news was a blur Was like 6 parked ambulances with holes drilled in tires in some arb German town
- TomMckenny 7y agoThere are powerful, influential people down-playing the seriousness of the epidemic while they unload stock. Pointlessly murder a few people by puncturing ambulance tires or profitably contribute statistically to the death of millions, there seem to be some deeply evil people around.
- gallegojaime 7y agoWe will pull together against CoVID, and anyone who takes this chance for criminal gains. For the readers who work in IT and cybersecurity, your actions now will save many lives. Keep calm and carry on.
- ch4s3 7y agoFor those less linguistically inclined, the article is about a spike in Ransomware attacks on the Spanish health system, and the use of Corona Virus websites and emails to spread similar ransomware to the general public.
- duxup 7y agoI suppose the folks whose 'job' is ransomware feels like healthcare systems will be more likely to pay up if already under stress.
- ch4s3 7y agoYeah, I suppose so... but ooof some people. I used to work in HealthCare and the IT side of health systems is so stupidly resistant to automated off site backups that this situation was bound to happen somewhere at the worst possible time.
- gadrev 7y agoLa Policía Nacional detectó este domingo un intento de bloquear los ordenadores de los hospitales españoles mediante el envío al personal sanitario de correos electrónicos con un virus “muy peligroso” con el señuelo de contener información sobre la Covid-19, según ha informado este lunes el director adjunto operativo del cuerpo, el comisario José Ángel González. La nueva amenaza es un virus informático del tipo ransomware [secuestrador de datos] denominado Netwalker, según detallan fuentes policiales. Este actúa bloqueando todos los archivos del equipo informático para, a continuación, lanzar un mensaje en el que exige el pago de un rescate para el desbloqueo de los mismos. National Police detected an attempt to lock down the hospital's computers with a "very dangerous" computer virus in emails pretending to contain information about COVID-19, as told by police chief J. A. G. The new threat is a computer virus of type ransomware called _Netwalker_, as told by police sources. This virus works locking access to all files in a computer and then asking for a ransom to unlock the files. It goes on to give a generic explanation of ransomware, but there doesn't seem to be much more technical detail in the article.
- manthideaal 7y agoSome more info from (1): The new Netwalker phishing campaign is using an attachment named "CORONAVIRUS_COVID-19.vbs". Related: Also from (2): APT36 uses two lure formats in this campaign: Excel documents with embedded malicious macros and RTF documents files designed to exploit the CVE-2017-0199 Microsoft Office/WordPad remote code execution vulnerability. from (3) .Ransomware Gangs to Stop Attacking Health Orgs During Pandemic (1) https://www.bleepingcomputer.com/news/security/netwalker-ransomware-infecting-users-via-coronavirus-phishing/ https://www.bleepingcomputer.com/news/security/netwalker-ran... (2) https://www.bleepingcomputer.com/news/security/nation-backed-hackers-spread-crimson-rat-via-coronavirus-phishing/ https://www.bleepingcomputer.com/news/security/nation-backed... (3) https://www.bleepingcomputer.com/news/security/ransomware-gangs-to-stop-attacking-health-orgs-during-pandemic/ https://www.bleepingcomputer.com/news/security/ransomware-ga...
- hn_throwaway_99 7y agoIf people die because of these attacks, which seems quite likely, capital punishment should be on the table IMO.
- Zhyl 7y agoThey certainly won't be being invited to any of my dinner parties.
- bargle0 7y agoIn the apocalypse that they hasten, they might be invited to my dinner party. They might not like how they get served, though. /s
- IAmEveryone 7y agoThe death penalty was abolished in Spain after the end of the Franco dictatorship in the 1970s. That, in combination with the universal prohibition of ex post facto legislation, leads to the conclusion that any future where people in Spain are executed for this is a future where a lot more went wrong than just these attacks.
- amelius 7y agoRansomware is another bad usecase of cryptocurrencies. Given that they also increase global warming, I've lost my enthusiasm for the concept.
- Skunkleton 7y agoI agree. In the end it’s all fiat currency anyway. What does any currency have without the rule of law?
- vbezhenar 7y agoAny currency worth using may be used for ransom. If currency can't be used for ransom, it's not anonymous enough and should be avoided. So existence of ransomware is the best marketing for cryptocurrencies. Just like terrorists using E2E messengers are the best marketing for encrypted messaging. If some people (does not matter, whether they're evil or good, just not stupid) are trusting technology with their freedom and lives, this technology is worth looking at.
- amelius 7y ago> If some people (does not matter, whether they're evil or good, just not stupid) are trusting technology with their freedom and lives, this technology is worth looking at. Yes, criminals would be stupid if they didn't use this technology. The concept is a gift from heaven for these people. What we need is a currency that is anonymous except for the two parties involved in the transaction, i.e. similar to cash but without the downsides of cash.
- taylodl 7y agoTwo kinds of people respond to fires: one, those who want to help put the fire out and do all they can to help; two, those who pour on the accelerant so they can watch the world burn! Are these type 2 people sociopaths? Yes. But it's interesting to think why that behavior evolves and what benefits it might (or has) confer to our species in the long run.
- wdroz 7y agoback in the days, hospitals were never targeted by hackers.
- soco 7y agoOn the same topic: "Medical company set to aid coronavirus response struck by ransomware" https://www.ciodive.com/news/medical-company-coronavirus-ransomware/574653/ https://www.ciodive.com/news/medical-company-coronavirus-ran...
- felco 7y agoPlease when reporting this kind of attack, share the Raw e-mail message. That helps identify the how the software is being hosted, domains and MTAs used to spread the message.
- ChrisArchitect 7y agothis is from today? meanwhile there was this story back on the 18th: Ransomware Gangs to Stop Attacking Health Orgs During Pandemic https://www.bleepingcomputer.com/news/security/ransomware-gangs-to-stop-attacking-health-orgs-during-pandemic/ https://www.bleepingcomputer.com/news/security/ransomware-ga... hmm..