N.J.’S Largest Hospital System Pays Up in Ransomware Attack

Re:N.J.’S Largest Hospital System Pays Up in Ransomware Attack by nradov on Monday December 16, 2019 @05:47PM (#21808304)

You prevent users from running untrusted applications. Only whitelisted applications can execute.

https://docs.microsoft.com/en-us/windows/security/threat-pro...

[ Parent | on HN ]

Re:N.J.’S Largest Hospital System Pays Up in Ransomware Attack by Cheyana on Monday December 16, 2019 @06:37PM (#21808777)

I don't see how this would help when all of this ransomware is usually a javascript dropper that gets in through the browser, encrypts files, and then gets out after the damage is done.

The only thing that ever saved us in the half dozen or so times that we've been hit is a robust backup system.

[ Parent | on HN ]

Re:N.J.’S Largest Hospital System Pays Up in Ransomware Attack by nradov on Monday December 16, 2019 @06:47PM (#21808874)

Are you certain that was the attack vector, and if so which specific browser vulnerability was it? I'm not aware of any browser JavaScript sandbox escape vulnerabilities that would allow file write access since about 2015. While it's remotely possible there is a zero-day vulnerability being exploited out there it seems highly unlikely. If your organization has been hit multiple times by similar problems then the IT management must be terribly incompetent.

[ Parent | on HN ]