FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

shostack wrote: post #2

How similar does this sound to the NotPetya "digital nuke" Russia unleashed on Ukraine? https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

I guess it will be another "for decades we didn't care about security because no obvious short term profits, now we will have to pay a great price" moments.

The article you linked is absolutely fascinating. Because network security improvements didn't grant higher ups "bonuses" they didn't make the slightest effort to do what engineered desperately asked.

> The security revamp was green-lit and budgeted. But its success was never made a so-called key performance indicator for Maersk’s most senior IT overseers, so implementing it wouldn’t contribute to their bonuses. They never carried the security makeover forward.

10 billions of damages later...

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#5

Post by sacks2k » Thu, Oct 29, 2020, 2:28 AM UTC

shostack wrote: post #2

How similar does this sound to the NotPetya "digital nuke" Russia unleashed on Ukraine? https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

All you need is a Russian IP address and you too can be Russian.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#6

Post by sieabahlpark » Thu, Oct 29, 2020, 2:29 AM UTC

Just enough time to hide all the evidence related to covid. How convenient

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#7

Post by vmception » Thu, Oct 29, 2020, 2:31 AM UTC

sacks2k wrote: post #5

shostack wrote: post #2

How similar does this sound to the NotPetya "digital nuke" Russia unleashed on Ukraine? https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

All you need is a Russian IP address and you too can be Russian.

You get paid the ransom

The Russian that owns the computer never gets framed because the subpoena fails

and the public doesn't look for you and just maintains their antiquated Red Scare™

All because of ignorance and pride on our leaders to not admit they don't have a handle on this

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#8

Post by haswell » Thu, Oct 29, 2020, 2:32 AM UTC

This is not what we need in these final chapters of 2020 with COVID cases spiking.

> Charles Carmakal, senior vice president for Mandiant, told Reuters that UNC1878 is one of most brazen, heartless, and disruptive threat actors he’s observed over the course of his career.

This is what terrorism looks like in 2020. Horrifying, terrifying, disgusting.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#9

Post by vmception » Thu, Oct 29, 2020, 2:33 AM UTC

That's messed up if true, but why would a ransomware operator target them? I mean like, they don't really target, they just wait for people to install something right?

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#10

Post by blendo » Thu, Oct 29, 2020, 2:35 AM UTC

Bad health IT is a public health issue.

Perhaps it’s time for hospitals to regularly report their OS versions and patch levels to our local health departments.