NHS computer systems hacked!?

mid_gen · 12 May 2017 at 16:17

Looks like a 'sleeper' variant of a ransomware attack has just hit it's activation time.

This won't be limited to just these two.

Felon · 12 May 2017 at 16:18

looks like half of the systems are displaying a crypto-locker style ransomware, also looks as though the ENTIRE NHS is affected, apparently GP surgeries and hospitals are affected...

This stuff is an absolute NIGHTMARE to get rid of, as everything is encrypted,

/random speculation

I wonder if it's an inside job / politically motivated

/random speculation

mid_gen · 12 May 2017 at 16:19

Setting the activation to a Friday afternoon....that's just nasty.

A *lot* of techs gonna be cancelling weekend plans.

Mynight · 12 May 2017 at 16:21

Arazi said:
BBC news just named the virus\malware on TV haha, now more people are going to be googling it and what happens then? Unbelievable.

They get lots of news articles about the "new" malware?

Won't anyone think of the children :eek:

mid_gen · 12 May 2017 at 16:22

Rroff said:
As an aside this is way you don't weaken encryption with stupid backdoors, etc. :s (as this would only be the tip of the iceberg compared to what that would make possible).

Well actually in this case, having a backdoor into the crypto would be quite useful

Felon · 12 May 2017 at 16:23

rofl, the national cyber security team are involved, I'm sure the crims are bricking it.

Nasher · 12 May 2017 at 16:23

Except the people writing the viruses won't include a back door even if it was law

darkgen · 12 May 2017 at 16:24

Wow; just wow. BUT hardly surprising something like this has finally hit the NHS given its archaic approach to IT systems and security.

Mynight · 12 May 2017 at 16:24

Nasher said:
Except the people writing the viruses won't include a back door even if it was law

But the government says they must though :confused:

. That's why they make these laws...

Maybe I'm being naive but wouldn't networks like this have software dedicated to preventing such attacks. Surely it couldn't have affected so many without being flagged?

Avenged7Fold · 12 May 2017 at 16:24

Screeeech said:
rofl, the national cyber security team are involved, I'm sure the crims are bricking it.

fb2cb487164fdeabe53d044775720574_image-706687-cyberspace-know-your-meme-cyber-police-meme_720-547.jpeg

gbgt2 · 12 May 2017 at 16:25

Luckily they will be fully prepared for something like this and it's a simple nuke and restore from backup. Right guys? Erm .. guys?

Felon · 12 May 2017 at 16:25

antijoke · 12 May 2017 at 16:30

Seeing reports that Santander, Telefonica and KPMG are also hit.

Ooops.

Comms company in Portugal, PT, also hit.

On Holiday · 12 May 2017 at 16:31

Arazi said:
BBC news just named the virus\malware on TV haha, now more people are going to be googling it and what happens then? Unbelievable.

What happens then? Go on..

touch · 12 May 2017 at 16:31

gbgt2 said:
Luckily they will be fully prepared for something like this and it's a simple nuke and restore from backup. Right guys? Erm .. guys?

You would hope that there's nothing to restore. Wipe the computer and reinstall the OS. Certainly all the patient records and things are securely stored in a safe database somewhere* and accessed through custom software package. Would there actually be anything saved on these computers which have been effected?

*maybe

Mynight · 12 May 2017 at 16:32

touch said:
You would hope that there's nothing to restore. Wipe the computer and reinstall the OS. Certainly all the patient records and things are securely stored in a safe database somewhere* and accessed through custom software package. Would there actually be anything saved on these computers which have been effected?

*maybe

That sounds expensive. Wouldn't a zip be cheaper?

Nasher · 12 May 2017 at 16:33

touch said:
You would hope that there's nothing to restore. Wipe the computer and reinstall the OS. Certainly all the patient records and things are securely stored in a safe database somewhere* and accessed through custom software package. Would there actually be anything saved on these computers which have been effected?

*maybe

They are probably using a "cloud" system, as is fashionable for people who don't know about IT. So that when theres a problem, everyone has a problem

Narj · 12 May 2017 at 16:34

Nasher said:
When we got hit by this at work we just wiped the infected PCs and recovered any damaged files from backups. It just encrypts any documents you have write access to but doesn't attach itself to files outside of the local system. After a while it actually deletes itself to try and stop people reverse engineering it.

Pretty sure I've seen some horror stories elsewhere of RW mounted network file systems getting encrypted too. Although obviously those will be backed up, right?

AHarvey · 12 May 2017 at 16:35

local doctors here has been hit with all, all encrypted.

Offered my help over the weekend if they need it with anything. Hope they have decent backups in place.

Felon · 12 May 2017 at 16:37

It's sort of amusing watching such a huge entity fall to bits because someone clicked lulz.exe in an email, but can you imagine being prepped for cancer surgery, then it gets cancelled because they can't load your scans...