Ransomware & HSE

igCorcaigh · 24-05-2021 02:22PM

Oh oh.

https://twitter.com/IMT_latest/status/1396797700029485063?s=19

24-05-2021 02:29PM

I received a very obvious automated scam call not to long ago (~20 minutes) saying their was a warrent out for my arrest. Wonder if it's related.

Seth Brundle · 24-05-2021 02:34PM

Malik Clean Stairwell wrote: »

I received a very obvious automated scam call not to long ago (~20 minutes) saying their was a warrent out for my arrest. Wonder if it's related.

Maybe it was a genuine call

RunningFlyer · 24-05-2021 02:35PM

Two calls today from different 083 mobile numbers with automated message claiming legal action unless I provide details... very skeptical it’s anything else but from HSE leak.

Edit: make that 3 calls...

MrMusician18 · 24-05-2021 02:58PM

I wonder (for the non automated calls) is the right tactic to string these people along, keep them on the line for as long as possible. Every minute they're talking to you is a minute they are not talking to someone more vulnerable.

Or is that putting a flag by your name as someone that would engage?

Amirani · 24-05-2021 03:38PM

Malik Clean Stairwell wrote: »

I received a very obvious automated scam call not to long ago (~20 minutes) saying their was a warrent out for my arrest. Wonder if it's related.

I got that one last week, from Department of Social Protection or something?

VinLieger · 24-05-2021 03:46PM

Malik Clean Stairwell wrote: »

I received a very obvious automated scam call not to long ago (~20 minutes) saying their was a warrent out for my arrest. Wonder if it's related.

Hah my boss got that one, it said he had an IRS arrest warrant out for him, seems like they aren't even bothered trying to localise and are just reusing their US scripts.

Hurrache · 24-05-2021 03:50PM

igCorcaigh wrote: »

Oh oh.

https://twitter.com/IMT_latest/status/1396797700029485063?s=19

That started last week, I know 1 person that got that type of call, and a bunch of others, including myself, of the other automated type, plus 1 with the arrest warrant.

24-05-2021 03:53PM

The 083 automated "Dept of Social Protection" calls predate the ransomware attack. They're just randomly generated calls. This particular scam is not new in the slightest, it has just been tweaked for the Irish public. If you do press 1 to be put through to them (which I did because winding up scammers is a hobby of mine) they don't have any of your information. They rely on you being convinced to just give it to them. Don't give them anything genuine.

24-05-2021 03:57PM

Amirani wrote: »

I got that one last week, from Department of Social Protection or something?

Yep, Thats the one!

Beanybabog · 24-05-2021 04:09PM

I’ve been getting those calls for a couple of week. someone told me that’s linked to the Facebook hack? They definitely started before the hse hack

drunkmonkey · 24-05-2021 04:52PM

RunningFlyer wrote: »

Two calls today from different 083 mobile numbers with automated message claiming legal action unless I provide details... very skeptical it’s anything else but from HSE leak.

Edit: make that 3 calls...

Block the numbers on your phone, had this trouble for few weeks blocking them sorted it out. Was getting them from land lines as well. Same spoof though.

yerwanthere123 · 24-05-2021 04:54PM

Malik Clean Stairwell wrote: »

I received a very obvious automated scam call not to long ago (~20 minutes) saying their was a warrent out for my arrest. Wonder if it's related.

Got the same thing at about half 2! I'm wanted for money laundering and drug trafficking apparently, I've been a right cheeky pup.

24-05-2021 05:06PM

yerwanthere123 wrote: »

Got the same thing at about half 2! I'm wanted for money laundering and drug trafficking apparently, I've been a right cheeky pup.

They don't expect you to admit to it! That's what I did when I spoke to them last week.
"Your PPSN is being used for bad things in Dublin city."
"What bad things?"
"Money laundering and drug trafficking."
"Oh yeah, I know that. That was me."

He hung up.

Hurrache · 24-05-2021 05:08PM

Beanybabog wrote: »

I’ve been getting those calls for a couple of week. someone told me that’s linked to the Facebook hack? They definitely started before the hse hack

It's not as in the cases I know of two don't have Facebook accounts.

RobbieTheRobber · 24-05-2021 06:23PM

Deleted User wrote: »

They don't expect you to admit to it! That's what I did when I spoke to them last week.
"Your PPSN is being used for bad things in Dublin city."
"What bad things?"
"Money laundering and drug trafficking."
"Oh yeah, I know that. That was me."

He hung up.

I got one of these calls on Saturday and wanted to play along but I was too happy sounding when I responded and they hung up on me with no interaction.
I was too eager, I couldn't believe it.

Wombatman · 24-05-2021 06:33PM

I would have expected another update from the NCSC at this stage. Last one was on the 16th.

radiospan · 24-05-2021 07:03PM

9pm in St Petersburg now. Stolen data from four organisations posted on their site today, including TU Berlin, but no HSE data posted so far.

frozenfrozen · 24-05-2021 07:06PM

rumour is all the apostrophes in our Irish names made them drop table and they lost the data

bobby sands O'Tables

irishgeo · 24-05-2021 08:08PM

radiospan wrote: »

9pm in St Petersburg now. Stolen data from four organisations posted on their site today, including TU Berlin, but no HSE data posted so far.

I imagine they are selling it the highest bidder.

ClosedAccountFuzzy · 24-05-2021 08:13PM

The HSE is unlikely to hold very much financial information like credit cards or bank account details. Almost all of the finances they're dealing with are either state payments or insurance payments, so it's not like a hack on some big online retailer.

AndrewJRenko · 24-05-2021 08:34PM

FuzzyThinking wrote: »

The HSE is unlikely to hold very much financial information like credit cards or bank account details. Almost all of the finances they're dealing with are either state payments or insurance payments, so it's not like a hack on some big online retailer.

Except for the staff payroll - probably the biggest payroll in the country.

irishgeo · 24-05-2021 08:41PM

AndrewJRenko wrote: »

Except for the staff payroll - probably the biggest payroll in the country.

With employee names, address and PPS number, DOB , Phone numbers.

Identity Theft goldmine.

ClosedAccountFuzzy · 24-05-2021 08:43PM

AndrewJRenko wrote: »

Except for the staff payroll - probably the biggest payroll in the country.

Assuming the payroll was anywhere near the hack. They’re usually run on fairly specific systems or even outsourced in many organisations.

deandean · 24-05-2021 08:50PM

FuzzyThinking wrote: »

Assuming the payroll was anywhere near the hack. They’re usually run on fairly specific systems or even outsourced in many organisations.

IIRC the HSE has a separate payeoll system, PPARS. Remember it cost €€€€€ to implement.
(Edit) It was abandoned, yet another massive waste of taxpayer money. Professor Brendan Drumm called a halt to its national rollout in 2005 as costs ballooned from an initial estimate of €9m. It has cost well in excess of €220m to date and is able to do just a fraction of the work intended.

ClosedAccountFuzzy · 24-05-2021 09:13PM

Integrating systems of 57 organisations with 67,000+ staff and umpteen other financial process isn’t cheap.

I suspect part of the problem here is we’ve been doing IT on the cheap and expressing political outrage when it costs money to implement.

If you look at the cost of seriously big IT systems, even in a relatively small bank like Bank of Ireland, you’re looking at €1bn +

€9m for a project of that scale seemed ludicrously small for what they were trying to do.

AndrewJRenko · 24-05-2021 09:17PM

deandean wrote: »

IIRC the HSE has a separate payeoll system, PPARS. Remember it cost €€€€€ to implement.
(Edit) It was abandoned, yet another massive waste of taxpayer money. Professor Brendan Drumm called a halt to its national rollout in 2005 as costs ballooned from an initial estimate of €9m. It has cost well in excess of €220m to date and is able to do just a fraction of the work intended.

As you noted yourself, that was 15 years ago. They've been on SAP payroll for a few years now.

24-05-2021 10:23PM

We can't seem to scope and cost projects properly in this country that's for sure. I wouldn't mind if projects are doubling in cost but when you see projects 5x/10x/20x the initial estimated it makes you wonder.

ixoy · 24-05-2021 11:05PM

FuzzyThinking wrote: »

€9m for a project of that scale seemed ludicrously small for what they were trying to do.

I believe, according to an IT expert here, one person could do it all in six months - upgrade it all and push into the cloud

gameoverdude · 24-05-2021 11:13PM

ixoy wrote: »

I believe, according to an IT expert here, one person could do it all in six months - upgrade it all and push into the cloud

Six months? No way!? unpossible.
Give it a week and I'm sure a youtube ad will come out about how to secure your network. state saves loads of dosh.

Ransomware & HSE

Comments