Information Technology Security

Emergency impacting more than 100 facilities appears to be caused by incident at software provider By Connor Jones,  The Register The Romanian national cybersecurity agency (DNSC) has pinned the outbreak of ransomware cases across the country's hospitals to an incident at a service provider. It said an unnamed service provider reported an issue prior to the flood of hospitals alerting the agency to the attacks. The service provider operates the Hipocrate Information System (HIS) – a multipurpose healthcare management platform used by hospitals across the country. All hospitals caught up in the ransomware scourge are thought to have been breached via the HIS. Per legal reporting obligations in Romania, service providers must inform the DNSC and national CSIRT of incidents that significantly impact the continuity of essential services. "We are exactly in the scenario of the Backmydata/Phobos ransomware incident that affected dozens of hospitals in Romania," the DNSC said t...

Russian hackers have threatened to target the NHS in a revenge plot stating "all ventilators will be attacked" in a chilling warning to the UK. By James Lee, Express The threat comes following the arrest of an alleged pro-Putin cybercriminal in London who is believed to be responsible for a hack on government and media websites in Romania . The suspect is part of a group known as “ Killnet ” who have since vowed to disable NHS ventilators, as well as ones in Romania and Moldova should their comrade not be released. Killnet has claimed responsibility for the attacks in Romania following the country's support for Ukraine during the ongoing Russian invasion. Pages attacked include the government homepage, defense ministry and various political parties and private companies. The man arrested in Britain has previously demonstrated support for Russia’s so-called “special operation” in numerous posts on his Facebook account. Police in Romania teamed up with Britain’s National Cr...

By Bill Toulas, Bleeping Computer The Romanian national cyber security and incident response team, DNSC , has issued a statement about a series of distributed denial-of-service (DDoS) attacks targeting several public websites managed by the state entities. The attack has been claimed by a pro-Russian group calling themselves Killnet . They targeted servers that host public sites with a high number of requests or high volumes of data, essentially depleting their processing resources and causing them to become unavailable. All websites are currently working. According to the DNSC announcement, attackers targeted the following websites: gov.ro (official website of Romania's Government) mapn.ro (official website of Romania's Ministry of Defense) politiadefrontiera.ro (official of Romanian Border Police) cfrcalatori.ro (official website of Romania's National Railway Transport Company) otpbank.ro (site of a commercial bank operating in Romanian)  DNSC is now collaborating with ot...