Live data from Hacker News

Iran-backed hackers claim wiper attack on medtech firm Stryker

krebsonsecurity.com

251–260 of 342 posts

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#251
post #244

Earlier quoted context omitted.

"Principle of least privilege" as MS calls it. Do not use global admin or admin account as daily driver for one. Dont save it in browser etc either. Limit roles, even within the application, here Intune. Office 365 also has conditional access and many policy leavers to tweak, many cases of people locking themselves OUT of 365. So the gates work but you need to configure them. "Break glass" global admin accounts now a…

Ok and who has access to the global admin and how resistant are they to Iranian operatives?

What are you asking?

For Stryker specifically? We don't and probably won't know details.

For companies in general? Background checks, security clearance etc are done if the company determines this necessary and are willing to pay for the process and higher salary.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#252
post #127

Earlier quoted context omitted.

Medtech company males complete sense. Iran's strategy seems to be to tighten the screws on US citizens so they put pressure on the government to stop the war. They seem to be doing that with things like higher gas prices, and now delays at hospitals with this stryker hit Makes sense given that US citizens tend not to be too supportive of american wars, but tolerate them because it doesnt really affect them. So iran c…

It it was the case, Iran underestimates how vindictive Americans are.

Meh. Americans showed in vietnam and iraq that they dont just go along with wars they think are bullshit

This could make americans hate iran and demand retribution, but i think its more likely to make americans made at israel and their own governmnet for dragging them into it for no reason

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#253
post #177
post #171

Earlier quoted context omitted.

[flagged]

I'm not quite getting your point. Are you saying that when Iran kills children, we should get angry and bomb them, and when the US kills children, other countries shouldn't get angry and bomb the US?

https://en.wikipedia.org/wiki/Manslaughter#Involuntary

See the accidental death section. Generally not considered a crime on its own.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#255

So gain access to a machine that can ask microsoft intune to eviscerate the company, ask it to do so, done. Bit of a shame all the machines had that installed really. Reminds me of crowdstrike.

Microsoft keeps disappointing and chief technology officers keep paying them. Wasn’t Elon Musk supposed to prove you could vibe code their entire product line? What happened to all that?

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#256

I'm trying to imagine the kind of response the USA would inflict on a country that wiped a girls school stateside.

If we take precedent from other times children in the USA were slaughtered in schools, probably a bit of national grandstanding on either end of the political spectrum then nothing actually material happening.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#257

I'm trying to imagine the kind of response the USA would inflict on a country that wiped a girls school stateside.

Extrapolate from the response to 9/11 but with 2026 technology and imagination is the only limit.

9/11 was when bankers were killed, not children. You have to extrapolate from Uvalde.

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#258
post #136

Earlier quoted context omitted.

>There is little evidence of what you say. ... but the danger of 'expansionism' is from Iran. if you aren't familiar with Hezbollah, Hamas, Houthis - i highly recommend reading on it, even if just in Wikipedia. >How many people have to die in those USA wars? I mean, enough is enough. I think most important isn'h how many, the most important is who. Iran's regime has just indiscriminately killed 20-30K innocent civili…

Why was Hezbollah created? From wikipedia: "Hezbollah was founded in 1982 by Lebanese clerics in response to the Israeli invasion of Lebanon" Why was Hamas created? From wikipedia: "was founded by Palestinian Islamic scholar Ahmed Yassin in 1987 after the outbreak of the First Intifada against the Israeli occupation" What about the Houthis? From wikipedia: "The formation of the Houthi organisations has been described…

>There is not evidence about that 20-30k civilians dead. I could say it was 3 and I would have the same proof that you have.

As i said you don't know what you're talking about. You seem to be just blabbering some gibberish. I'm not engaging with you anymore here.

https://www.rferl.org/a/iran-protest-death-toll-ofogh-tv/336...

"The government of Iran's reformist President Masud Pezeshkian has published the names and national ID numbers of 2,985 individuals killed during recent nationwide protests."

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#259
post #136

Earlier quoted context omitted.

>There is little evidence of what you say. ... but the danger of 'expansionism' is from Iran. if you aren't familiar with Hezbollah, Hamas, Houthis - i highly recommend reading on it, even if just in Wikipedia. >How many people have to die in those USA wars? I mean, enough is enough. I think most important isn'h how many, the most important is who. Iran's regime has just indiscriminately killed 20-30K innocent civili…

> Iran's regime has just indiscriminately killed 20-30K innocent civilians and uncountable many have been tortured. That is a crime against humanity. So, the top of Iran's regime and its IRGC has to be punished. I'm fine with that punishment being US and Israel's missiles. Israel's regime has killed twice that many in Gaza. Shouldn't they be prioritized for "punishment"?

As i said the key thing isn't how many, it is who, how and what for.

Israel started the war in response to the genocide of Oct 7. So all the legitimate collateral victims and damage from Israel's actions here is responsibility of the perpetrators of Oct 7.

You aren't calling for prosecution of the perpetrators of Oct 7. That is already shows your colors.

Anyway, the number of killed you cite comes directly from Hamas (its Ministry of Health stated those numbers to UN). Hamas is a terrorist org, and can't be trusted at all.

There is no evidence that Israel killed civilians in any meaningful numbers, and that the killings were criminal and not legitimate collateral.

Now, there is a million of cell phones in Gaza. After several years of watching Ukraine war anybody knows the amount of cell footage to expect. Some Russian killings in Bucha were recorded by reconnaissance drone for example. Russian soldiers posted videos of them executing POWs, security cameras recorded Russian soldiers marauding and so forth. Where is pretty much no footage comes from Gaza. "Israel soldiers shoot at the crowd at food distribution center" and nobody recorded anything (especially giving that according to Hamas it happens regularly - and still no footage!)

And on rare occasions when some footage comes out - the analysis in the example below shows that the basic laws of physics wouldn't let even 20 people to be killed when Hamas claimed 400-800 in that "bombing of hospital" (again, if you watch war footage, you'd know what gore of several people killed by explosion would look like, and no way the parking lot would look that way just the morning several hours later - where is all the blood for example? it is pretty obvious that the asphalt hadn't been washed by the time photo was made so blood should be there even if they picked up all the bodies and parts of it)

https://news.ycombinator.com/item?id=38751882

Re: Iran-backed hackers claim wiper attack on medtech firm Stryker

#260

Earlier quoted context omitted.

yeah that is a lot of tech, but it’s all B2B- no consumer breach, right?

sure no consumer data breach... but this is still going to shutdown or impact lots of medical facilities. heart rate monitors that go down and no one can get support for, cannot get replacement CAT scan equipment, etc.

This is not true. The hack did not affect Stryker products sold to hospitals and clinics, it only impacted Stryker employees work and personal devices. Yes 50tb of data was exfiltrated and it remains to be seen what that data is and how it might impact products down the line.
Post reply on HN