Great Western Coffee Shop

All across the Great Western territory => The Wider Picture in the United Kingdom => Topic started by: ChrisB on September 26, 2024, 09:29:08



Title: NR train stations wifi display terrorism message after cyber-security incident
Post by: ChrisB on September 26, 2024, 09:29:08
From The Metro, via MSN (https://www.msn.com/en-gb/news/world/uk-train-stations-display-terrorism-message-after-major-cyber-security-incident/ar-AA1rcUpG?ocid=msedgntp&pc=FSTS&cvid=b30e4c7fc8384445b50f9bc13e85034e&ei=8)

Quote
Several major UK train stations appear to be showing terrorism-related messages after being hacked in a major ‘cyber-security’ incident.

London Euston, Manchester Piccadilly and 11 other stations managed by Network Rail appear to have had their Wi-Fi hacked by a third party.

Those attempting to log into Network Rail’s service have been met with a webpage titled ‘we love you, Europe’, which contains Islamophobic messages and details of several terrorist attacks which have taken place in the UK, including the 2017 Manchester Bombing.

The Wi-Fi is still down this morning and an investigation is ongoing.

It is understood that other organisations have been impacted too.

Other stations hit by the hack are London Victoria, Birmingham New Street, Glasgow Central, Leeds City, Liverpool Lime Street, Bristol Temple Meads, Edinburgh Waverley, Reading and Guildford.

List of affected stations
The cyber incident is affecting 19 stations.

Network Rail Wi-Fi is available at the following stations.

Birmingham New Street
Bristol Temple Meads
Edinburgh Waverley
Glasgow Central
Guildford
Leeds
Liverpool Lime Street
London Bridge
London Cannon Street
London Charing Cross
London Clapham Junction
London Euston
London King’s Cross
London Liverpool Street
London Paddington
London Victoria
London Waterloo
Manchester Piccadilly
Reading
St Pancras station is unaffected, Network Rail said.

It was first understood that 20 stations were affected, but Network Rail has since confirmed that 19 Network Rail-managed stations are affected.

The third-party provider of Wi-Fi at the stations is thought to be Telent.

Telent provides ICT and communications services across transport, emergency services, higher education, network providers and the public sector, its website says.

From MyLondon, via MSN (https://www.msn.com/en-gb/news/uknews/london-and-other-uk-train-stations-wi-fi-targeted-in-cyber-attack/ar-AA1rcFAg?ocid=msedgdhp&pc=U531&cvid=abb7e68b58f84adcacafd26716a95c01&ei=88)

Quote
includes -
Passengers trying to log into the Wi-Fi service at London Euston and Victoria Stations, as well as Manchester Piccadilly and other major UK travel hubs, were met with a webpage about terror incidents in the UK.

The page, seen by MyLondon, writes 'We love you, Europe' and appears to have an Islamophobic message, with details about Islamic extremist terror attacks in the UK.

Network Rail confirmed the Wi-Fi services were suspended as enquiries take place.

I'm surprised that Network rail use the same wifi network across all the stations.


Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: Mark A on September 26, 2024, 09:47:29
It'll be one system and remotely managed (by Telent) perhaps.

Mark


Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: ChrisB on September 26, 2024, 20:31:58
As these stations aren't close enough that one user might wander direct from one to another directly, there's little point in being one network - may as well each have their own so hackers only get into one at a time


Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: Ollie on September 26, 2024, 22:07:46
There has been an update to this;

From Sky News - Man who works for WiFi company arrested after train passengers receive Islamophobic messages https://news.sky.com/story/train-passengers-receive-islamophobic-messages-after-cyber-attack-13222280



Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: Chris from Nailsea on September 26, 2024, 22:09:51
Thanks for that update, Ollie.  :)


Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: grahame on September 27, 2024, 02:54:41
As these stations aren't close enough that one user might wander direct from one to another directly, there's little point in being one network - may as well each have their own so hackers only get into one at a time

There is sense in code and infrastructure singularity from a support viewpoint - change and maintain in one place with automated propagation.   Efficiency, consistency for the user, etc.


Title: Re: NR train stations wifi display terrorism message after cyber-security incident
Post by: Electric train on September 27, 2024, 06:39:34
The public WiFi at Network Rail managed stations is a totally separate system to Network Rail internal IT systems, even to the extent it is "air gapped" and not just reliant on a software firewall.




This page is printed from the "Coffee Shop" forum at http://gwr.passenger.chat which is provided by a customer of Great Western Railway. Views expressed are those of the individual posters concerned. Visit www.gwr.com for the official Great Western Railway website. Please contact the administrators of this site if you feel that content provided contravenes our posting rules ( see http://railcustomer.info/1761 ). The forum is hosted by Well House Consultants - http://www.wellho.net