Know How the 2nd Cyberattack was Prevented by AIIMS on June 6.

Post Views: 577

Defence Research and Development Organisation (DRDO) is currently in charge of AIIMS Delhi’s cyber department. According to sources of information, significant structural modifications have been made to strengthen the servers’ cyber security.

Another malware attack was revealed on Tuesday, almost 6 months after a cyberattack that rendered the servers of AIIMS Delhi unusable. However, with the assistance of a cutting-edge firewall protection system that the prestigious institute had implemented, the latest attack was stopped within a day.

While organizations like NCIPC and CERT-IN are looking into the most recent ransomware assault, the All India Institute of Medical Sciences’ (AIIMS) cyber cell is now under the supervision of the Defence Research and Development Organisation (DRDO).

Major improvements in structure have been made for the servers’ cyber security, which stopped the attack, said a trusted source at AIIMS.

The official claimed that after the cyber assault event occurred last November, the firewall’s rules underwent a significant update that stopped the server hack.

“If there is any unusual activity that seems suspicious, the firewall automatically activates and stops the network in order to prevent any further virus spread,” he continued.

The company’s spokesperson said that the server’s 4-hour downtime was also caused by routine firewall activities. On Tuesday afternoon, medical professionals were unable to retrieve patient reports for over 4 hours due to a compromised system.

According to the representative, the preventative action was what caused the server to go offline.

“The firewall trigger is what caused the server to go offline. We must determine what is taking place. Every security device has the tendency to stop working whenever a firewall detects malware,” the official continued.

More security measures, according to the official, would be implemented during the six months that follow.

The AIIMS cyber security department discovered the malware attack, which was eventually stopped and neutralized by the team, according to a statement from AIIMS officials.

“The AIIMS’s cyber-security systems discovered a malware intrusion around 14:50 hrs. The attempt was prevented, and the threat was eliminated thanks to the installed cyber-security systems. The e-hospital services continue to be entirely secure and are operating properly,” the official continued.

The institution server was the target of a cyberattack in November and December that shut down internet services at the top hospital for more than 15 days. It appears that the cyberattack affected at least five servers.

Following the incident, AIIMS made the decision to fortify its e-hospital network and announced that it would only be allowed to operate on a specialized and secure AIIMS LAN/intranet connection that its computer facilities department would maintain.

According to Dr. M. Srinivas, director of AIIMS, the engineering services department would assist power point needs, work with MTNL service providers to lay internet cable/wire, and manage the database for open internet services requested by user departments.

According to Director Dr. M. Srinivas, “Open Internet services are essential prerequisites for academic, administrative, and research endeavors. These facilities shall be obtained from MTNL at an appropriate cost and kept running by respective departments that use them within their specific research funds or approved GIA-General funds, as applicable.”

About The Author:

Yogesh Naager is a content marketer that specializes in the cybersecurity and B2B space. Besides writing for the News4Hackers blog, he’s also written for brands including CollegeDunia, Utsav Fashion, and NASSCOM. Naager entered the field of content in an unusual way. He began his career as an insurance sales executive, where he developed an interest in simplifying difficult concepts. He also combines this interest with a love of narrative, which makes him a good writer in the cybersecurity field. In the bottom line, he frequently writes for Craw Security.