Thai hospitals and companies hit by ransomware attacks

 

FILE PHOTO: Silhouette of mobile device user is seen next to a screen projection of binary code are seen in this picture illustration taken March 28, 2018. REUTERS/Dado Ruvic/Illustration

 

BANGKOK (Reuters) - Hospitals and companies in Thailand were hit by hackers who held their computer systems and data ransom, demanding payment to restore information, police said on Thursday.

 

"Government hospitals and companies were hacked in the same manner as Saraburi Hospital," Major General Phanthana Nutchanart, said, referring to a cyber attack earlier this month.

 

Saraburi Hospital could not access its data on Sept. 5, slowing operations relying on manual functions, but the hospital did not receive a demand for payment.

 

Some organisations that received ransom demands have already paid to retrieve data, in sums not exceeding 1 million baht (24,668.23 pounds), he said, adding that the total number of organizations affected was still being investigated.

 

Hackers attacked organisations with a "ransomware" code, which locks up the files on a computer and encrypts them, blocking access until the ransom is paid, usually in cryptocurrency like bitcoin.

 

In 2017, the WannaCry ransomware attack disrupted hospitals and businesses across the world.

 

Thai police believe that the virus originated in Europe.

 

-- © Copyright Reuters 2020-09-10

 

- Whatever you're going through, the Samaritans are here for you

- Follow Thaivisa on LINE for breaking COVID-19 updates

Mmm that knock off windows 97 they are using isn't safe, who would have thought....

Even I have an automatic data backup that protects against ransomware on my home network. It seems surprising that big organisations like a hospital wouldn't at least have the same. It really just entails backing up the data to storage where the rest of the network doesn't have write access.

 

Perhaps new variants are more sophisticated.

You can buy insurance against ransomware attacks, but the insurers require that you follow some security procedures or install protective hardware. I guess these places don't want to spend the outlay for such protection.

1 hour ago, snoop1130 said:

Thai police believe that the virus originated in Europe.

Hahahaha .. would have to wouldn't it .. 

Where did the hacker go ? 

ransomware maybe .. 

1 hour ago, snoop1130 said:

Thai police believe that the virus originated in Europe.

I could have sworn it started in Wuhan.

I think they only play minesweeper whit that ! Thinking load of paper what you always need carry to IO i consider they not use that for work!

Hope those submarines get delivered soon, that will help protect the country against these modern attacks!

12 hours ago, phetphet said:

You can buy insurance against ransomware attacks, but the insurers require that you follow some security procedures or install protective hardware. I guess these places don't want to spend the outlay for such protection.

my buddy in the US had insurance.  Sure enough, his system was hacked, they found his policy, they asked for and got the whole $5mil!

12 hours ago, phetphet said:

You can buy insurance against ransomware attacks, but the insurers require that you follow some security procedures or install protective hardware. I guess these places don't want to spend the outlay for such protection.

But some seem prepared to pay the ransom to retrieve information.

backward thinking again.

 

There are two sorts of people in this world, those that have lost their hard drives and those that are about to lose their hard drives. Always backup, backup and backup.

 

immigration site does not even have to be hacked to be bad ????

14 hours ago, thedemon said:

Even I have an automatic data backup that protects against ransomware on my home network. It seems surprising that big organisations like a hospital wouldn't at least have the same. It really just entails backing up the data to storage where the rest of the network doesn't have write access.

 

Perhaps new variants are more sophisticated.

Note Europe blamed again

Yup, sh"t happens when you're still using PIRATED Windows 97 or XP.

1 hour ago, jobsworth said:

There are two sorts of people in this world, those that have lost their hard drives and those that are about to lose their hard drives. Always backup, backup and backup.

 

If you think proper long-term multi location backups shield you from ransomware you're unfortunately very wrong. It's been a trend for quite some time already for ransomware to live silently in systems and networks for months or even more than a year before it strikes. By the time you notice something's wrong (because all of a sudden you can't open files anymore) all your data, backups included, is infested. So even when you decide to turn back the clock on your devices by say 6 months (which means you're already losing lots of valuable data) that ransomware will still be there doing its thing. For many organizations just paying the ransom turns out to be the only viable 'cure'.

 

This type of malware is gonna take far more advanced digital defense technology than most organizations ever considered. It's also a direct result of systematic IT under-funding. Installing and maintaining proper digital infrastructure is a costly business, one which takes skill and knowledge few people possess.

Data breach at hospital: Thais investigating malware attack "from Europe"

 

Picture: INN

 

Experts in IT from the police, military and the Ministry of the Digital Economy and Society are investigating a malware attack on Saraburi Hospital and other private businesses. 

 

INN reported that there had been data breaches at a hospital and elsewhere though the Saraburi Hospital was yet to receive a ransom demand. 

 

Pol Maj-Gen Phanthana Nuchanat, a senior policeman involved in drug related matters, admitted data breaches and said that some private companies had already paid ransoms. 

 

Investigations have shown that the malware originated in mainland Europe. 

 

Investigations continue

 

Source: INN

 

 

-- © Copyright Thai Visa News 2020-09-11

 

- Whatever you're going through, the Samaritans are here for you

- Follow Thaivisa on LINE for breaking COVID-19 updates

11 minutes ago, webfact said:

mainland Europe. 

O_O it would be the very first ransomware originated from the mainland, usually it comes from the Eastern Europe.

I can even list exact countries :D

1 minute ago, fdsa said:

O_O it would be the very first ransomware originated from the mainland, usually it comes from the Eastern Europe.

I can even list exact countries ????

it might be the last step in the route it took but not necessarily where it originated   

16 minutes ago, webfact said:

mainland Europe

From Russia with love

1 hour ago, Bender Rodriguez said:

immigration site does not even have to be hacked to be bad ????

Already hacked a couple of years ago.

16 hours ago, thedemon said:

Even I have an automatic data backup that protects against ransomware on my home network. It seems surprising that big organisations like a hospital wouldn't at least have the same. It really just entails backing up the data to storage where the rest of the network doesn't have write access.

 

Perhaps new variants are more sophisticated.

I was a database manager for a U.S. Naval hospital. Backup systems are at the bottom of their wish list. I screamed like a raped ape how important it was, particularly in cases like pap smears where the history, if lost, could threaten lives, but it just never happened. We never got more than a two-week backup, and THAT process was quite suspect.  I can only imagine how low on a Thai totem pole a backup system can be.

4 hours ago, J Town said:

I was a database manager for a U.S. Naval hospital. Backup systems are at the bottom of their wish list. I screamed like a raped ape how important it was, particularly in cases like pap smears where the history, if lost, could threaten lives, but it just never happened. We never got more than a two-week backup, and THAT process was quite suspect.  I can only imagine how low on a Thai totem pole a backup system can be.

Dead n buried deeper than the pole.

oh no .... thailand IT experts never heard of SPOOFED IP

Whoop! No wonder, didn't buy the subs yet..

On 9/10/2020 at 11:44 PM, phetphet said:

You can buy insurance against ransomware attacks, but the insurers require that you follow some security procedures or install protective hardware. I guess these places don't want to spend the outlay for such protection.

Preventative actions? I don't think that phrase translates into Thai?

Investigations have shown that the malware originated in mainland Europe. 

 

The Smart BMW......

 

The hospitals should be using a "closed" system for all patient details anyway.

Their externat system should not be linked to the above.

Couple of days back, Thai folk, on handouts, could not use their gov. ATM cards....