Drug maker MSD hit by ransomware, Indian website down

MSD said as it is addressing the potential impact to its business, while it continues to work on minimizing disruption to patients, customers and its other business partners.

The global pharma major said it it immediately shut down its IT systems as a precautionary measure to help contain the problem and, where needed, moved to business continuity plans to ensure ongoing operations.

“To meet patient and customer needs, we are working to maintain a sufficient supply of medicines and vaccines,” MSD said.

MSD was hit by a ransomware that infects and locks a computer system, and then demands a USD 300 ransom to be paid in bitcoins.

Many firms, including Symantec, have suggested the ransomware is a variant of Petya, a known ransomware. But according to security firm Kaspersky Lab, preliminary findings indicate the attacks are from a new ransomware that it's now calling "ExPetr." The attackers were using a Windows operating system flaw called EternalBlue to spread through corporate networks.

MSD with sales of around USD 40 billion in 2016 is one of the world’s biggest drug makers.

To be sure – the hackers didn’t limit their attacks on MSD alone; They have penetrated the networks of several big corporates including British advertising agency WPP, Russian oil and gas giant Rosneft, global logistics company FedEx and Danish shipping firm Maersk, among others.