10Fold – Security Never Sleeps – 48

Your daily digest of “All Things Security” gathered, collected and researched by your very own 10Fold Security Practice team.

Big items to considerA California hospital has been held hostage by hackers demanding a $3.6m ransom. Nasdaq has announced that later this year it will record all stockholders voices on its own blockchain system for companies listed on the exchange. New Android malware roots and hijacks devices and can grant itself administrator rights. IBM announced its new cyberframe that will have capabilities for speedy encryption and cyber analytics

Hollywood Hospital Held Hostage By Hackers Asking $3.6M Ransom To Release Network From Malware Publication: International Business Times Reporter name: Clark Mindock

A California hospital’s computer network  is under attack by hackers who won’t go away until they’re paid $3.6 million, according to the Verge. The hospital has moved all of its patients to nearby facilities and is reportedly using faxes to communicate in the absence of email. The hackers — whose identities are unknown — have been holding the Hollywood Presbyterian Medical Center’s network hostage for a little more than a week, and everything from basic computer functions to connected medical devices have been affected at the 434-bed facility. The source of the ransomware on the network is currently unknown, but officials have indicated it may have been installed unwittingly by a hospital employee who perhaps opened up a malicious link from an email.


Nasdaq to use blockchain to record shareholder votes Publication: PCWorld Reporter name: Perter Sayer

Add shareholder voting to the list of applications for blockchain technologies. Later this year, Nasdaq plans to record stockholders’ electronic votes on its own blockchain system for companies listed on one of its exchanges. By digitizing the entire process, it expects to speed and simplify the proxy voting process. Blockchains — the best known of which is the public ledger of bitcoin transactions — are distributed records of events, each block in the record containing a computational “hash” of itself and of the previous block, so that all are connected like links in a chain.


SMS Android malware roots and hijacks your device – unless you are Russian Publication: ZDnet Reporter name: Charlie Osborne

Android-based mobile malware which is able to give itself admin privileges and completely take over aspects of a smartphone’s functionality has been discovered in the wild, researchers say. According to security specialist Andra Zaharia from Heimdal Security, the malware, dubbed Mazar Android BOT, spreads via SMS and MMS messages. If installed, the malicious code hidden within grants itself administrator rights on an Android device, giving attackers the option to send premium messages without consent, hijack browser sessions, root the device, monitor phone and text messages and retrieve device data.


IBM’s New Cyberframe Is The World’s Most Secure Server For Data Centers, Cloud And Mobile Publication: Forbes Reporter name: Steve Morgan

Today IBM Corp. officially announced its z13s mainframe with speedy encryption, cyber analytics, and other security innovations which are baked into the new machine. Call it a cyberframe and watch the CIOs come running. Big Blue spent 5 years and one billion dollars developing the z13 mainframe which was introduced last year for large customers. IBM describes it as the most sophisticated computer system ever built. Now they’ve added an ‘s’ to the end, for security. The z13 can process 2.5 billion transactions a day, or the equivalent of 100 Cyber Mondays every day, based on results from IBM internal lab measurements. The z13s has advanced cryptography features built into the hardware that allow it to encrypt and decrypt data twice as fast as previous generations, protecting information without compromising performance.