This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.theguardian.com/technology/2017/jun/15/university-college-london-hit-by-ransomware-attack-hospitals-email-phishing

The article has changed 3 times. There is an RSS feed of changes available.

Version 0 Version 1
University College London hit by ransomware attack University College London hit by ransomware attack
(7 months later)
Hospitals with relationship to university suspend email servers in precautionary measure against phishing scam
Alex Hern
Thu 15 Jun 2017 14.44 BST
Last modified on Wed 20 Sep 2017 23.06 BST
Share on Facebook
Share on Twitter
Share via Email
View more sharing options
Share on LinkedIn
Share on Pinterest
Share on Google+
Share on WhatsApp
Share on Messenger
Close
University College London has been hit by a “major” ransomware attack which brought down its shared drives and student management system.University College London has been hit by a “major” ransomware attack which brought down its shared drives and student management system.
The attack has also led to a number of hospital trusts suspending their email servers as a precautionary measure, in an attempt to prevent the repetition of last month’s damaging WannaCry epidemic.The attack has also led to a number of hospital trusts suspending their email servers as a precautionary measure, in an attempt to prevent the repetition of last month’s damaging WannaCry epidemic.
UCL first reported problems at 5pm on Wednesday afternoon. It believes a phishing email, sent around midday, resulted in the ransomware gaining a foothold on its servers, where it began spreading through the university’s N (network) and S (shared) drives. By 7pm, it had restricted access to those drives, and they are currently available in read-only mode for students and staff.UCL first reported problems at 5pm on Wednesday afternoon. It believes a phishing email, sent around midday, resulted in the ransomware gaining a foothold on its servers, where it began spreading through the university’s N (network) and S (shared) drives. By 7pm, it had restricted access to those drives, and they are currently available in read-only mode for students and staff.
University College London Hospitals, an NHS trust closely associated with the university, did not report any problems with ransomware, but some hospitals decided to suspend their NHS email systems anyway, as a precautionary measure to prevent a new outbreak.University College London Hospitals, an NHS trust closely associated with the university, did not report any problems with ransomware, but some hospitals decided to suspend their NHS email systems anyway, as a precautionary measure to prevent a new outbreak.
Barts Health NHS Trust, the largest NHS trust in the UK, was one that closed its mail server: due to its close links with UCLH, the trust “temporarily shut emails down to make sure nothing spread”, according to a spokesperson. East and North Herts NHS Trust similarly said it closed its NHS mail server as a “preventative measure, because we’ve been warned by other hospitals to do so”.Barts Health NHS Trust, the largest NHS trust in the UK, was one that closed its mail server: due to its close links with UCLH, the trust “temporarily shut emails down to make sure nothing spread”, according to a spokesperson. East and North Herts NHS Trust similarly said it closed its NHS mail server as a “preventative measure, because we’ve been warned by other hospitals to do so”.
It’s not yet clear what specific strain of ransomware hit UCL, but the university is warning that it may be a “zero-day” attack – one not seen in the wild before – due to the fact that it was not picked up by its antivirus software. The attack began on the same day Microsoft released an extremely rare security update for Windows XP and Windows Vista, warning of WannaCry-style attacks in the future using one of 16 different critical vulnerabilities.It’s not yet clear what specific strain of ransomware hit UCL, but the university is warning that it may be a “zero-day” attack – one not seen in the wild before – due to the fact that it was not picked up by its antivirus software. The attack began on the same day Microsoft released an extremely rare security update for Windows XP and Windows Vista, warning of WannaCry-style attacks in the future using one of 16 different critical vulnerabilities.
Malware
Hacking
Data and computer security
NHS
Hospitals
UCL (University College London)
news
Share on Facebook
Share on Twitter
Share via Email
Share on LinkedIn
Share on Pinterest
Share on Google+
Share on WhatsApp
Share on Messenger
Reuse this content