http://www.lep.co.uk/news/health/nhs-computers-down-after-virus-patients-told-to-avoid-hospital-and-walk-in-centre-unless-absolutely-necessary-1-8540798

Just spoke with someone at our local hospital and servers ate all being shut down - confirmed

Apparently the ransom demander is rumored to have rung Jeremy Hunt and said:

'$300 dollars or I'll bring the NHS to its knees'

Hunt is rumored to have retorted:

'You are just showing off and trying to make me look bad - I've been trying to bring the NHS to its knees for years'

He continued:

'Anyway, no way I'm investing that much in the NHS - go for it (thinking Win Win)

http://www.mirror.co.uk/news/uk-news/nhs-cyber-attack-live-updates-10409420

 

NHS cyber attack: Live updates as 16 hospital trusts hit across the country causing chaos for patients

 

The NHS has been reportedly hit by a 'cyber attack' today - affecting hospitals across the country and causing chaos for patients.

 

Reports are coming in that people expecting to see doctors and nurses - and in some cases undergo operations - are being turned away as health agencies try to get control of a developing situation.

 

Hospitals are reported to be diverting emergency operations - and services are severely disrupted the length of the UK.

 

Initial reports describe the situation as a 'large-scale attack'.

 

Youch!

Sorry, tobyjugg - didn't realise you had started this one.. there is another link here - I will ask site team to merge.

http://www.consumeractiongroup.co.uk/forum/showthread.php?477566-NHS-Trusts-across-the-country-hit-by-Ransomware-attack

'At this stage we do not have any evidence that patient data has been accessed. We will continue to work with affected organisations to confirm this'

https://www.theregister.co.uk/2017/05/12/nhs_hospital_shut_down_due_to_cyber_attack/

hopefully this is still, and will be, the case. ie no patient data accessed

some news reports saying win xp is still being used by some, and there were prior warnings about lax security!

Hmm win xp is still used by many large organisations due to compatibility issues...

Spoke to our it team recently and they said we were safe as these sort of viruses need administration rights on a computer...

I wrote a basic program in 5 min that didn't need administration rights and still had same effects - they were not impressed...

Wasn't perfect but it worked...

P.s. it basically rar'd the files with a password that was 3x randomly generated numbers 4 digit longs times each other.

It then pinged a server 3 times using the 3 numbers as the ping size

Added a text document to the startup folder

Then deleted the un rar'd files and itself

Just thought I'd add incase anyone got curious - it works on xp can't say it would work on anything newer

Hmm win xp is still used by many large organisations due to compatibility issues...

 

Spoke to our it team recently and they said we were safe as these sort of viruses need administration rights on a computer...

 

I wrote a basic program in 5 min that didn't need administration rights and still had same effects - they were not impressed...

 

Wasn't perfect but it worked...

 

P.s. it basically rar'd the files with a password that was 3x randomly generated numbers 4 digit longs times each other.

 

It then pinged a server 3 times using the 3 numbers as the ping size

 

Added a text document to the startup folder

 

Then deleted the un rar'd files and itself

 

Just thought I'd add incase anyone got curious - it works on xp can't say it would work on anything newer

depends on attachment and script security - these aren't any sort of buffer overflow errors.

What would you prefer the NHS spent its reducing budget (in real terms per patient) IT or medicine?

So much for the effectiveness of the snoopers charter and GCHQ spying on all the nations citizens - they cant even stop or intercept this.

I think May should be required to answer why.

http://www.lincolnshirelive.co.uk/mass-cancellation-of-appointments-at-lincolnshire-hospitals-after-cyber-attack/story-30329359-detail/story.html

 

 

Weekend appointments at hospitals across Lincolnshire have been cancelled after a large-scale cyber-attack brought the NHS to its knees.

 

Phone lines and computer systems are down at Lincoln County Hospital, Boston Pilgrim Hospital and Grantham and District Hospital after the ransom-ware attack was launched on Friday afternoon.

 

NHS England has confirmed 16 of its organisations have been affected, with thousands of staff locked out of their equipment.

 

Now, United Lincolnshire Hospitals Trust has confirmed it is cancelling all outpatient, endoscopy, cardiology and radiology appointments scheduled for this weekend.

 

Read more at http://www.lincolnshirelive.co.uk/mass-cancellation-of-appointments-at-lincolnshire-hospitals-after-cyber-attack/story-30329359-detail/story.html#lYRlIhWbHLojGlJ7.99

https://www.theguardian.com/technology/2017/may/13/nhs-workers-and-patients-on-how-cyber-attack-has-affected-them

 

Theresa, 44, a breast cancer patient from Lincolnshire

 

 

 

I was halfway through my chemotherapy infusion when the attack happened. The treatment finished without a hitch, but I then had to wait for a couple of hours for my medications to take home. That’s because all drugs have to be checked against prescriptions, and they are all computerised. The hospital pharmacists worked quickly to produce paper copies, but it still took a while. The horrible side-effects (nausea, exhaustion, dizziness) kicked in while I was stuck in rush-hour traffic coming home. Fortunately, I wasn’t driving.

 

There were other patients in the ward waiting to start their chemo whose drugs had been delivered but again couldn’t be checked, so administration was delayed. In some cases treatment had to be postponed entirely for another day. The oncology nurses and the hospital staff were brilliant throughout, reassuring patients and doing their best in difficult circumstances. They were also deeply apologetic, frustrated that they couldn’t do their job, and angry that such an act had put patients treatment – and lives – at risk.

 

 

Claims that patient care has been unaffected are dismissed by doctors, nurses, pharmacists and patients

Are they likely to find the person(s) who did this? I hope so, and I hope any deaths due to this is laid at their door with at the very least, manslaughter charges.

They might find out where the people who did this come from. It might not be organised crime, but a 14 year old boy sat in a bedroom anywhere in the world. Some of the most serious hacking has been done by teenagers from the UK.

As for the NHS they opted not to pay Microsoft for upgrades to their software which might have prevented this hack, if the latest updates were installed.

it seems to be big one! current 'all you need to know' info re.

'The ( 'stolen' NSA powered) WannaCrypt ransomware worm, aka WanaCrypt or Wcry, today exploded across 74 countries, infecting hospitals, businesses including Fedex, rail stations, universities, at least one national telco, and more organizations. In response, Microsoft has released emergency security patches to defend against the malware for unsupported versions of Windows, such as XP and Server 2003, as well as modern builds...'

https://www.theregister.co.uk/2017/05/13/wannacrypt_ransomware_worm/

They might find out where the people who did this come from. It might not be organised crime, but a 14 year old boy sat in a bedroom anywhere in the world. Some of the most serious hacking has been done by teenagers from the UK.

 

As for the NHS they opted not to pay Microsoft for upgrades to their software which might have prevented this hack, if the latest updates were installed.

I thought that might be the case regarding the perpetrator

Very short-sighted of the NHS

And did you see the latest news that a UK security expert by accident stopped the further spread of this. Apparently a hidden domain address was in the virus code and it had not been registered. He therefore regustered the domain for £8 and somehow it acted as a stop.

And did you see the latest news that a UK security expert by accident stopped the further spread of this. Apparently a hidden domain address was in the virus code and it had not been registered. He therefore regustered the domain for £8 and somehow it acted a stop.

Yes, I have just been reading about this guy. I imagine a lot of people are very relieved indeed !

 

'Accidental hero' halts ransomware attack and warns: this is not over

 

Expert who stopped spread of attack by activating software’s ‘kill switch’ says criminals will ‘change the code and start again’

The “accidental hero” who halted the global spread of an unprecedented ransomware attack by registering a garbled domain name hidden in the malware has warned the attack could be rebooted.

 

https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ransomware-cyber-attack

And did you see the latest news that a UK security expert by accident stopped the further spread of this. Apparently a hidden domain address was in the virus code and it had not been registered. He therefore regustered the domain for £8 and somehow it acted as a stop.

detailed reports say temporary stop,

so the malware was further controlled

which indicates an organised attack - not a prank

and the NHS had little choice not to upgrade their systems - no money. no staff

http://privacy-pc.com/articles/ransomware-chronicle.html

And did you see the latest news that a UK security expert by accident stopped the further spread of this. .

yes, in the link posted #13!

 

hopefully this is still, and will be, the case. ie no patient data accessed

so far, K J May confirms

http://www.telegraph.co.uk/news/2017/05/13/theresa-may-confirms-nhs-patient-records-have-not-compromised/

some news reports saying win xp is still being used by some, and there were prior warnings about lax security!

as has been posted re funding,

'The Government ended its annual £5.5 million deal with Microsoft to provide ongoing security support for Windows XP in May 2015, unless individual trusts - already struggling with budgets - were prepared to pay extra for an extended support deal.'

'The home secretary has said NHS trusts should “make sure they do upgrade” their IT systems in response to the huge cyberattack which hit the NHS yesterday...'

really!

'The home secretary has said NHS trusts should “make sure they do upgrade” their IT systems in response to the huge cyberattack which hit the NHS yesterday...'

really!

She was also saying in an interview that her priority was the security of the uk

As it was a BBC interview nobody asked her 'what went wrong then'.

The honest reality is that in a very interconnected world there is not much a government can do, unless it passes legislation that requires a minimum level of internet security protection within public bodies and companies that are strategically important to the UK. The government would then update the minimum requirements regularly and it would be a legal requirement to update security wiithin a certain period of time.

Even then, the hackers are probably miles ahead of the latest internet security and that requires international internet Police to monitor what is going on.

I am waiting for the day, when major Banks have been hacked and accounts either have zero balances or everyone is given a million. It is going to happen at some point. I just hope they go for the give everyone a million option.

The honest reality is that in a very interconnected world there is not much a government can do, unless it passes legislation that requires a minimum level of internet security protection within public bodies and companies that are strategically important to the UK. The government would then update the minimum requirements regularly and it would be a legal requirement to update security wiithin a certain period of time.

 

Even then, the hackers are probably miles ahead of the latest internet security and that requires international internet Police to monitor what is going on.

 

I am waiting for the day, when major Banks have been hacked and accounts either have zero balances or everyone is given a million. It is going to happen at some point. I just hope they go for the give everyone a million option.

Yes unc, but that this IS the sort of worldwide threat that is at the very 'schoolboy' end of achievability really does make these claims justifying the snoopers charter seem hogwash.

The bitcoin wallets are apparently filling up.

Is this all new and unexpected by those who should know - like GCHQ and Amber Rudd?

Absolutely not

http://privacy-pc.com/articles/ransomware-chronicle.html

Ransomware has been since the late 80's, I vaguely remember this sort of thing happening many years ago to computers. Who remembers the blaster virus - which is still around - try installing an early release of xp and see how long it lasts once connected to the internet

So Amber Rudd should be required to explain why all this money spent on GCHQ and all the erosion of privacy has not prevented even so basic an issue, let alone claimed interference in elections.

Less time and effort spent spying on UK citizens, just in case they might make a political statement, and more addressing actual issues which affect those citizens and core UK businesses is required it seems to me.

tracking originators location etc or is it that our IP addresses are against our privacy rights, and payment to bank etc etc ???? must be tracable in this day and age\???