NotPetya Outbreak Left Merck Short of HPV Vaccine Gardasil (securityledger.com)
chicksdaddy shares a report from The Security Ledger: The NotPetya malware infection shut down pharmaceutical giant Merck's production of the pediatric vaccine GARDASIL last June, forcing the company to borrow the drug from a stockpile maintained by the U.S. Centers for Disease Control and Prevention to meet demand, The Security Ledger reports. The anecdote was contained in a quarterly filing by Merck with the U.S. Securities and Exchange Commission (SEC) on Friday. That filing also showed that the company continues to suffer financial fallout from the outbreak of the NotPetya malware in June, reducing both sales and revenue for the quarter by hundreds of millions of dollars. In its quarterly 8-k filing, Merck said that revenue for the quarter was "unfavorably impacted" by around $135 million due to "lost sales in certain markets related to the cyber-attack." Sales in the third quarter of 2017 were also reduced by around $240 million, which Merck chalked up to production shutdowns resulting from NotPetya. In a chilling insight into the extent of the disruption the malware caused to Merck's operations, the company disclosed that part of its quarterly losses were linked to the interruption of its production of GARDASIL, a vaccine used to prevent Human Papillomavirus (HPV) which is linked to certain cancers and other diseases. To make up for what it described as "overall higher demand than originally planned," Merck was forced to borrow the vaccine from a stockpile maintained by the U.S. Centers for Disease Control (CDC), the company said.
Thanks Not Security Agency for hoarding 'sploits instead of responsibly publicizing them (Eternalblue) and destroying the safety and security of those you are sworn to protect. You should be broken into pieces and scattered to the winds.
The Good News: only affected Guardasil, the shittiest little vaccine out there.
<blink>down the rabbit hole</blink>
Such a 'poor' company doesn't have the resources to combat cyberattacks it has to use that to flood the Trump-voting rednecks with Fentanyl.
They are good in fighting human viruses just not in fighting cyber ones.
Security isn't flashy or cool but when everything comes to a grinding halt because of malware then you have earned it because you refused to invest in basic security.
No tears shall be shed for the PHBs at Merck.
Anons need not reply. Questions end with a question mark.
What the fuck? Are they concerned about an outbreak? They may be a good idea, but they can't be a reason to stockpile what is at best a quality of life issue?
If HPV can only propagate in the U.S.A. with the absence of Gardasil vaccination due to the presence of the NotPetya virus, then should not HPV be reclassified as a subviral satellite of NotPetya?
[quote]... reducing both sales and revenue for the quarter by hundreds of millions of dollars. In its quarterly 8-k filing, Merck said that revenue for the quarter was "unfavorably impacted" by around $135 million due to ...[/quote]
hundreds of millions ... around $135 million.
Where where the other hundreds of millions - $135 million lost?
As if "responsible disclosure" is the one thing that went wrong. In fact the idea is a little bonkers to begin with, but let's look at what else these people could've done beyond relying on the NSA.
What does that production line need with an internet connection, or even a sneakernet connection, or however it got infected?
Why in the world do you insist on running your machinery with malware-ridden virus-vulnerable generally-unsafe desktop emulators? Use something else. We know this software is crap so stop using it.
In fact, beyond notoriously sickly software there's the added problem of the software monoculture. So use at least two different operating systems, Real ones, one to run the machinery and one that does the admin, so that if the latter gets infected it cannot spread to the former. The former doesn't get to talk to anything but the machinery and the admin kit, obviously.
And, of course, there's a hardware monoculture. So fix that too, while at it. At least put a little thought into the whole thing. That way you're not dependent on a notoriously shady agency foregoing their shady thing just because you're so special, or whatever.
So what we have here is a general failure to take responsibility. And you can't blame it all on the NSA. Not by a long shot.
Sounds like an animals rights group that is against humans keeping domesticated animals for companionship.
Or an upsetting comment made to a doggie.
outbreak of the NotPetya malware
as if it were a papillomavirus, not a weapon employed by humans, or human organizations like the state of Russia. Maybe we should stop speaking of "computer viruses" altogether. It fosters this image that fighting malware is like pest control, it obscures the human interests behind them. Malware doesn't just "break out" autonomously.
If anything at all, this should cause a criminal investigation against those responsible, as gross negligence was clearly involved.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Completely irresponsible to let it affect them so much for so long and wreak so much havoc.
Malware doesn't just "break out" autonomously.
It does if you run Windows!
I've seen this myself. Managers wave it off with an "It'll be fine" brush off. IT workers just want to get their deliverable done and out the door. Until you have a group that is a first class citizen in your organization, and is concerned with security, these sorts of thing will remain common occurrences.
TFA says Merck was "forced to borrow" from the CDC stockpile to "meet demand".
Since it's not the government's job to ensure that a company continues to make money and I'm sure they sold it to the CDCD at a nice markup already, why didn't the CDC just supply the vaccine directly to those in need ? Did Merck pay to "borrow" the vaccine ?
Everything you need to know about the Petya, er, NotPetya nasty trashing PCs worldwide
0.0.0.0 1dnscontrol.com
0.0.0.0 aica.co.jp
0.0.0.0 an-crimea.ru
0.0.0.0 ankerch-crimea.ru
0.0.0.0 argumenti.ru
0.0.0.0 argumentiru.com
0.0.0.0 bg.pensionhotel.com
0.0.0.0 blog.fontanka.ru
0.0.0.0 caforssztxqzf2nm.onion
0.0.0.0 calendar.fontanka.ru
0.0.0.0 fontanka.ru
0.0.0.0 grupovo.bg
0.0.0.0 i24.com.ua
0.0.0.0 imer.ro
0.0.0.0 ks.ua
0.0.0.0 mediaport.ua
0.0.0.0 most-dnepr.info
0.0.0.0 novayagazeta.spb.ru
0.0.0.0 online812.ru
0.0.0.0 osvitaportal.com.ua
0.0.0.0 otbrana.com
0.0.0.0 pensionhotel.com
0.0.0.0 pensionhotel.cz
0.0.0.0 sinematurk.com
0.0.0.0 spbvoditel.ru
0.0.0.0 t.ks.ua
0.0.0.0 www.aica.co.jp
0.0.0.0 www.fontanka.ru
0.0.0.0 www.grupovo.bg
0.0.0.0 www.imer.ro
0.0.0.0 www.mediaport.ua
0.0.0.0 www.online812.ru
0.0.0.0 www.otbrana.com
0.0.0.0 www.pensionhotel.cz
0.0.0.0 www.sinematurk.com
0.0.0.0 www.t.ks.ua
APK
P.S.=> SOURCE https://www.welivesecurity.com/2017/10/24/bad-rabbit-not-petya-back/
NSA created EternalBlue. I'm sure we're going to be seeing prison time for the NSA for weaponizing this against civilians, rather than working with OS vendors to fix the exploit before it was used maliciously.
Because if I as a normal joe created this, I'm pretty sure I would do time for it.
And everyone is supposed to be equal in the eyes of the law. That we know too.
APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Ads/script/malware rob speed/security/privacy/bandwidth.
Hosts add speed (via hardcodes/adblocks), security (vs. bad sites/malware/poisoned dns), reliability (vs. dns down), & anonymity (vs. dns requestlogs/trackers).
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity & faster vs. addons/routers/remote dns!
Avoids DNSChangers in routers/IP settings & dns redirect (99.999% of ISP DNS != patched vs. it) + DNS tracking & lighten DNS load & resolve faster from local RAM!
* Via what u NATIVELY have in a FASTER kernelmode IP stack!
APK
P.S. - Safe https://www.virustotal.com/en/file/e01211ca36aa02e923f20adee0a3c4f5d5187dc65bdf1c997b3da3c2b0745425/analysis/1433430542/ (self checking code vs. infection of program built-in it)
I guess spending anything up to, say, 130 Millions for security is well spent money, don't you agree?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.