Re:Hospitals across England hit by large-scale cyber-attack
by detaro on Friday May 12, 2017 @01:19PM
(#14325827)
3) The internal networks are open enough that something worm-y can rapidly spread through bugs in common services (file shares or something like that), once it has infected one internal machine through some other channel.
This doesn't sound like a spread by phishing or attachment.
How could such an attach be co-ordinated?
I can think of two possibilities:
1) The attack has been spreading over days or weeks with a trigger date for activation. 2) The ransomware has been distributed through the desktop update system.
Any other ideas?