Live data from Hacker News

FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

krebsonsecurity.com

11–20 of 357 posts

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#11
post #5
post #2

How similar does this sound to the NotPetya "digital nuke" Russia unleashed on Ukraine? https://www.wired.com/story/notpetya-cyberattack-ukraine-rus...

All you need is a Russian IP address and you too can be Russian.

Ah yes, I’m sure that’s all the evidence they have that points towards Russia/Eastern Europe.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#12

That's messed up if true, but why would a ransomware operator target them? I mean like, they don't really target, they just wait for people to install something right?

Probably for initial infection it’s random but the negotiation for keys happens between real people.

Thieves must be heartless to go after such desperate targets. But criminals always have ways of justifying things.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#15
post #12

That's messed up if true, but why would a ransomware operator target them? I mean like, they don't really target, they just wait for people to install something right?

Probably for initial infection it’s random but the negotiation for keys happens between real people. Thieves must be heartless to go after such desperate targets. But criminals always have ways of justifying things.

>but the negotiation for keys happens between real people

I would be surprised if no one has written a smart contract for this yet - release the keys when X BTC are deposited to address Y.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#16

That's messed up if true, but why would a ransomware operator target them? I mean like, they don't really target, they just wait for people to install something right?

Hospitals may be coming up as a target with highest ROI. Automation is often less than you expect

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#17
post #10

Bad health IT is a public health issue. Perhaps it’s time for hospitals to regularly report their OS versions and patch levels to our local health departments.

My hospital offline for a whole week because they got hit by a ransomware attack, and they use Epic. I asked someone I knew at Epic what she knew about it, and confirmed that my hospital was up-to-date on the latest version of their software and following most of their security protocols. My initial thought was they had weak IT security and now I’m not so sure.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#18
post #8

This is not what we need in these final chapters of 2020 with COVID cases spiking. > Charles Carmakal, senior vice president for Mandiant, told Reuters that UNC1878 is one of most brazen, heartless, and disruptive threat actors he’s observed over the course of his career. This is what terrorism looks like in 2020. Horrifying, terrifying, disgusting.

Why the assumption that its terrorist and not a state sanctioned attack?

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#19
post #8

This is not what we need in these final chapters of 2020 with COVID cases spiking. > Charles Carmakal, senior vice president for Mandiant, told Reuters that UNC1878 is one of most brazen, heartless, and disruptive threat actors he’s observed over the course of his career. This is what terrorism looks like in 2020. Horrifying, terrifying, disgusting.

Why the assumption that its terrorist and not a state sanctioned attack?

If we're honest, it's neither. It's 1000% profit-orientated.

Re: FBI, DHS, HHS Warn of Imminent Ransomware Threat Against U.S. Hospitals

#20

Earlier quoted context omitted.

Why the assumption that its terrorist and not a state sanctioned attack?

If we're honest, it's neither. It's 1000% profit-orientated.

I think you just accurately described most of North Korea's cyber attacks.

Not to say that they are the culprit; just that state sponsored and and money driven aren't necessarily exclusive.

Post reply on HN