Advertisement

We need your help now

Support from readers like you keeps The Journal open.

You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.

If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.

Shutterstock/Sergey Nivens

Defence Forces deployed 'ethical hackers' to fight back against massive HSE cyber attack

The CIS Corps deployed experts trained to think like cyber criminals to tackle the threat.

THE DEFENCE FORCES deployed the skills of so-called ‘ethical hackers’ in their bid to fight back against the HSE cyber attack of May this year. 

Ethical hackers are trained to effectively think like a cyber criminal and highlight flaws in a system’s structure. They’re typically tasked with highlighting weaknesses that need to be addressed in IT systems. 

Captain Steve Keane, an Officer in the Computer Response Team (CRT) of the Defence Forces Communications and Information Services Corps (CIS), has revealed for the first time the detailed work of the unit during the HSE crisis, which is still not yet fully resolved. 

In a podcast by the Defence Forces, Keane revealed how his unit were contacted immediately by the HSE and how they set about trying to find the hackers and analyse the virus.

“We had personnel who were analysing the malware – what does it do?” he said.

“They were also hunting for the threat actor, the adversary, on the network. [We were asking] is the person there? Is there a level of persistence where the network is brought back up and is there something nasty hiding in the corner and undoes all the work?”

Keane said that there were also military experts involved in testing a decryptor – a programme designed to retrieve infected data on HSE computers. 

He said that his team were working on the project with the health service “up until extremely recently”.

According to the latest update from the HSE, 82% of systems are now decrypted. The attack continues to affect various aspects of the service, but according to the latest official update on the ransomware attack there is currently “no evidence that large amounts of patient or staff data has been published online or sold to criminals involved in fraud”.

As the health system buckled under the pressure of the initial attack, Keane said the Defence Forces sprung into action immediately. 

While Keane didn’t comment on any specific measures, sources have told The Journal that soldiers attached to CIS were sent to hospitals and HSE offices to decrypt computers on site.

The captain said: “The Defence Forces, due to its flexible nature, were able to deploy very quickly. We were able to deploy nationally to a lot of locations in every corner of the country due to the amount of barracks and their locations so we were very flexible. 

“It was great to see all the different companies, all the different entities there. They were at the briefings and everyone saying ‘what can we do?’. It was a very positive experience.”

As previously reported by The Journal, significant questions have been raised by TDs and military sources about the impact of funding cuts on the CIS Corps.

Keane did not speak about the funding shortfall in the Defence Forces affecting its ability to respond but defended his unit’s capability.  

“The quality of people we have, we don’t have a lot of personnel – as with every organisation you are crying out for more but the people we do have, the skills they have, are exceptional.”

Keane was asked during the interview what was the future for the CIS Corps and he said that the need for the unit was only going to grow. 

“It is only going to get bigger, it has to get bigger. It is recognised by the European Defence Agency, by NATO, by any credible force that the nature of conflict has changed.

Using a term often deployed by military experts to refer to traditional warfare he said: “You don’t just have kinetic conflict, from now on, it will be proceeded by a cyber effect.”

Readers like you are keeping these stories free for everyone...
A mix of advertising and supporting contributions helps keep paywalls away from valuable information like this article. Over 5,000 readers like you have already stepped up and support us with a monthly payment or a once-off donation.

Close
39 Comments
This is YOUR comments community. Stay civil, stay constructive, stay on topic. Please familiarise yourself with our comments policy here before taking part.
Leave a Comment
    Install the app to use these features.
    Mute I love my County
    Favourite I love my County
    Report
    Jul 30th 2014, 9:40 AM

    Boom-bust-boom-repeat….

    81
    Install the app to use these features.
    Mute Keith Michael Gregg
    Favourite Keith Michael Gregg
    Report
    Jul 30th 2014, 9:54 AM

    Why not maintain them and take in the rents?

    53
    Install the app to use these features.
    Mute Business Cat
    Favourite Business Cat
    Report
    Jul 30th 2014, 10:02 AM

    They weren’t supposed to perform that roll.

    Better the taxpayer recoup their money.

    58
    Install the app to use these features.
    Mute significantrisk
    Favourite significantrisk
    Report
    Jul 30th 2014, 11:17 AM

    They recently announced a plan to do exactly that, but they’ll be choosy as to what they hang onto.

    16
    See 2 more replies ▾
    Install the app to use these features.
    Mute Andrew Haire
    Favourite Andrew Haire
    Report
    Jul 30th 2014, 11:17 AM

    Selling at a bargain basement price, property sharks to make a killing from the new property boom.

    26
    Install the app to use these features.
    Mute Barry Healy
    Favourite Barry Healy
    Report
    Jul 30th 2014, 3:17 PM

    I know they were set up to recoup the money that was given during the bail outs of the banks but when NAMA ssems to be pretty profitable why don’t they hold onto these properties long term and NAMA can move over to the pensions reserve fund when the bail out money is returned providing income for the fund in perpetuity. After all it was raided for the ball out too and every so often they start banging on about a pensions timebomb so maybe this is the solution.

    6
    Install the app to use these features.
    Mute David Burke
    Favourite David Burke
    Report
    Jul 30th 2014, 11:05 AM

    Carrickmines is busiest retail space in Dublin I would swear. It’s always busy every day of the week.

    45
    Install the app to use these features.
    Mute Dermot Ryan
    Favourite Dermot Ryan
    Report
    Jul 30th 2014, 11:25 AM

    N.A.M.A. …. They have as much respect for the law as the Israeli have for the U.N .
    Still they’re all together in a nice little nest ….

    18
    Install the app to use these features.
    Mute Marko Burns
    Favourite Marko Burns
    Report
    Jul 30th 2014, 12:40 PM

    Is there anything not in Nama?
    It seems to be the equivalent of a Govt 1 Euro shop at this stage.

    17
    Install the app to use these features.
    Mute Alan Kennedy
    Favourite Alan Kennedy
    Report
    Jul 30th 2014, 1:33 PM

    “Four Lakes Retail Park in Carlow, a site with a high vacancy rate… but there is a drive-thru Supermacs at the entrance.”

    Somebody fetch me my chequebook, they have a Supermacs!

    9
    Install the app to use these features.
    Mute Neal Ireland Hello
    Favourite Neal Ireland Hello
    Report
    Jul 30th 2014, 3:43 PM

    The best thing about that place is that due to all the vacancies you often have the whole car park to yourself to enjoy your Supermacs in peace.

    12
    Install the app to use these features.
    Mute Alan Cooke
    Favourite Alan Cooke
    Report
    Jul 30th 2014, 6:10 PM

    Why are these properties not being offered to the tenants first? They are being sold at a knock down price yet the tenants are expected to pay boom upward only rents. Then we wonder why things are so expensive, wonder why small/medium bushiness go bust? These properties would realise more for the state if they were offered this way. The same with all the housing in NAMA. I don’t think rents would be as high as they are and another property bubble forming if housing was also offered this way to the general public.

    5
    Install the app to use these features.
    Mute Paul Roche
    Favourite Paul Roche
    Report
    Jul 30th 2014, 1:54 PM

    Ok,
    How can we have competition in property markets if 5 retail parks in various locations are to be sold to 1 buyer?

    3
    Install the app to use these features.
    Mute John C OBrien
    Favourite John C OBrien
    Report
    Jul 31st 2014, 3:09 PM

    WHAT ABOUT THE WATER CHARGES FOR O A P

    1
Submit a report
Please help us understand how this comment violates our community guidelines.
Thank you for the feedback
Your feedback has been sent to our team for review.

Leave a commentcancel

 
JournalTv
News in 60 seconds