Many hospitals across the country have been hacked, and Tencent’s smart security “Yudian” provides a comprehensive killing plan.

Virus attacks are undoubtedly the most significant security issue perceived by users in recent years. Last year, a large number of enterprises worldwide were attacked by viruses such as ransomware and mining trojans, with a total loss of tens of billions of dollars. Important infrastructure for data, such as government, universities, hospitals, and large enterprises, has become a target. Since 2018, the frequency of attacks on China's medical system has shown a clear upward trend. In April, a hospital in China was attacked by the GlobeImposter family, causing some files and applications to be destroyed by virus encryption, which affected the normal operation of the hospital. The threat of Internet security issues to public institutions such as hospitals cannot be ignored.

Last week, Tencent Yujian Threat Intelligence Center monitored that many hospital servers in the country were hacked. The attackers violently cracked the remote login service of the hospital server, and then used the cloud sharing file function to download a variety of mining Trojans and excavated cottages. The cryptocurrency, including Monroe, Ethereum, and Zero Coin, has accumulated more than RMB 400,000.

It is understood that the attacker will disguise the mining Trojan as a remote assistance tool Teamviewer, which will detect and terminate the process of up to 50 common mining procedures, and monopolize the server resources mining, resulting in poor performance and slow speed of the hospital business system. As a result, the hospital's medical order is slowed down, thus missing the patient's golden treatment time.

It is worth noting that because the server has been completely controlled by hackers, there may be more serious risks such as medical information disclosure and blackmail virus destruction, or the medical business will be completely paralyzed, and the patients will be treated normally and even harm the lives of patients. If the mining Trojan continues to spread through the hospital intranet, it may also cause more computers to be invaded and mine, and it will not escape the new round of ransomware and information leakage threats, in addition to causing the hospital to face important medical data and property losses, and ultimately It may also threaten people's livelihood security.

In addition, the mining trojan will modify the registry to disable operating system security by disabling UAC user account control, disabling Windows Defender, and turning off warnings when running dangerous programs.

全国多家医院遭黑客入侵,腾讯智慧安全“御点”提供全面查杀方案

(The attack process of the mining Trojan)

According to the statistical analysis of Tencent Yuzhi Threat Intelligence Center, the proportion of open remote login services in China's medical institutions is as high as 50%, which means that half of the servers may encounter the same attack. Based on this analysis, the Tencent Yuzhi Threat Intelligence Center has contacted the victim hospital to help these units address systemic risks. At the same time, clues about the authors of the virus have been discovered through technical means - the controller of the mining Trojan has used the same ID for more than a decade in various hacker forums and developer forums. The attacker's clue has been handed over to the relevant department for further tracking.

全国多家医院遭黑客入侵,腾讯智慧安全“御点”提供全面查杀方案

(attack geographical indication)

At present, Tencent Smart Security has formed a defense system in response to the mining Trojan. Tencent Smart Security Terminal Security Management System, which applies tens of billions of levels of cloud detection virus database, engine library and Tencent TAV anti-virus engine and system repair engine to medical enterprises, which can effectively prevent virus Trojan attacks on medical enterprise intranet terminals. . At the same time, Royal Point also has a comprehensive security management function such as terminal anti-virus unified management and control, fixed vulnerability management and control, and strategic management and control, which can help medical institutions to fully understand and manage the security status of the enterprise intranet and protect the network information security of medical institutions.

In addition to targeted killing of virus attacks, Tencent Royal Terminal Security Management System also works with Tencent Royal Threshold Advanced Threat Detection System, Tencent Yujian Security Situational Awareness Platform and the newly added Tencent Yuzhi Network Space Risk Radar. In the aspects of terminal security, border security, website monitoring, and unified monitoring, a set of security systems integrating risk monitoring, analysis, early warning, response and visualization is provided for medical institutions, providing industry solutions and comprehensively protecting the network of enterprise users. Safety.

Internet security in the medical industry is related to the lives of countless people. Tencent Smart Security will continue to pay close attention to various security issues related to the medical industry including terminal equipment security and business data security, and assist medical institutions to protect the safe operation of medical information systems.

Fresh Ginger

Our company mainly processes and exports Ginger, which is processed and sold throughout the year. The specifications are: 50g, 150g, 200g, 250g, 300g, 350g.The packages are calcium plastic boxes, cartons and mesh bags.Products are exported to Europe, the United States, South Korea, Malaysia, the Middle East and other countries and regions.The company relies on the good prestige and the excellent product quality has won the general customer the high praise, hoped has the export order the customer please to relate with us.In order to establish long-term business relations, mutual benefit and common development.

Fresh Mature Ginger

Fresh Ginger,Fresh Young Ginger,Fresh Mature Ginger,Bulk Fresh Ginger

Jining Sunagro Trade Co., Ltd. , https://www.sunagro-food.com