@teriradichel@infosec.exchange
Post #1632290
2026-04-07 16:32 UTC
I was just listening to an interview on the radio with a person who worked at a hospital.
1. Your cyber insurance makes you a target. They know how much you can pay.
2. Don’t use your backups until you have eliminated the attacker or they will encrypt your backups too.
3. Pull the plug until you figure that out and cut them off (except critical patient machines). The hospital in story I was listening to had people running across the hospital when faxes were overused and started smoking.
4. They got in because the hospital was running out of date software and one person clicked a link about a bonus. (And apparently no network segregation?)
Hospital was down and patients needing cancer treatment had to drive over a mountain to nearest hospital so oncology was first restored.
Was part of a wave of attacks on rural hospitals during Covid.
I believe the ransomware was Medusa but I thought they said was attributed to Russia. Attribution is difficult. You might not really be sure, especially with AI.
https://thehackernews.com/2026/04/china-linked-storm-1175-exploits-zero.html
Replies (0)
No replies.