Ransomware Attack On 16 NHS Hospitals

[Xiphos]

Now spread to 74 Countries
Could the I.T. geeks on here explain to a layman WTF is going on?

 

[eyejay51]

Think I'd better go and check the wife's computer - I bet this is something she's clicked on that's set this shitstorm in motion.

 

[TCIB]

Now spread to 74 Countries
Could the I.T. geeks on here explain to a layman WTF is going on?

A virus has been let loose probably via the flash utorrent trojan which allows other stuff to be downloaded including this virus that searches your system and encrypts all common files and system critical files. The only way your getting the decryption key is by paying up. Utorrent is a very popular torrent client that has flash ads in the user interface, yesterday it had a very nasty virus embedded in one of those ads that will have infected many pc's. These infected systems can themselves be held to ransom or used in an attacking nature as a base for sending phishing emails, taking the pc owners email contacts and sending stuff to them pretending to be the pc owner etc.

 

[TCIB]

@Damocles http://www.theregister.co.uk/2017/05/12/spain_ransomware_outbreak/

Based on eternalblue smb attack tool

This is why i dislike smb shares, they are hard to lock down fully.

 

[Churchlawtonblue]

@Damocles http://www.theregister.co.uk/2017/05/12/spain_ransomware_outbreak/

Based on eternalblue smb attack tool

This is why i dislike smb shares, they are hard to lock down fully.

From someone who drills holes for a living i have no idea what you are talking about but it sounds impressive.

 

[TCIB]

From someone who drills holes for a living i have no idea what you are talking about but it sounds impressive.

smb is a way to share drives/printers etc across networks, it often has vulnerabilities that are exploitable, and in this instance has been. It is the flash player of file sharing aka pretty insecure to anyone with a slight bit of determination.

 

[Blue Smarties]

A virus has been let loose probably via the flash utorrent trojan which allows other stuff to be downloaded including this virus that searches your system and encrypts all common files and system critical files. The only way your getting the decryption key is by paying up. Utorrent is a very popular torrent client that has flash ads in the user interface, yesterday it had a very nasty virus embedded in one of those ads that will have infected many pc's. These infected systems can themselves be held to ransom or used in an attacking nature as a base for sending phishing emails, taking the pc owners email contacts and sending stuff to them pretending to be the pc owner etc.

Sounds a bit more advanced than when I used to phish Habbo Hotel accounts as a fresh faced 14 year old.

Lol.

 

[TCIB]

Sounds a bit more advanced than when I used to phish Habbo Hotel accounts as a fresh faced 14 year old.

Lol.

I don't associate with underworld criminal scum like you :-D

Heads will indeed roll, a patch was put out on March 14th, for the NHS not to be patched is poor form, it is considered critical in IT terms i.e. should be kept bang up to date. That system must be a right old mess.

 

[Gaylord du Bois]

Now spread to 74 Countries
Could the I.T. geeks on here explain to a layman WTF is going on?

Blessed are the geeks, for they shall inherit the earth.

 

[@BluePhil8]

Wish those responsible could face the death sentance.