Title: NR train stations wifi display terrorism message after cyber-security incident Post by: ChrisB on September 26, 2024, 09:29:08 From The Metro, via MSN (https://www.msn.com/en-gb/news/world/uk-train-stations-display-terrorism-message-after-major-cyber-security-incident/ar-AA1rcUpG?ocid=msedgntp&pc=FSTS&cvid=b30e4c7fc8384445b50f9bc13e85034e&ei=8)
Quote Several major UK train stations appear to be showing terrorism-related messages after being hacked in a major ‘cyber-security’ incident. London Euston, Manchester Piccadilly and 11 other stations managed by Network Rail appear to have had their Wi-Fi hacked by a third party. Those attempting to log into Network Rail’s service have been met with a webpage titled ‘we love you, Europe’, which contains Islamophobic messages and details of several terrorist attacks which have taken place in the UK, including the 2017 Manchester Bombing. The Wi-Fi is still down this morning and an investigation is ongoing. It is understood that other organisations have been impacted too. Other stations hit by the hack are London Victoria, Birmingham New Street, Glasgow Central, Leeds City, Liverpool Lime Street, Bristol Temple Meads, Edinburgh Waverley, Reading and Guildford. List of affected stations The cyber incident is affecting 19 stations. Network Rail Wi-Fi is available at the following stations. Birmingham New Street Bristol Temple Meads Edinburgh Waverley Glasgow Central Guildford Leeds Liverpool Lime Street London Bridge London Cannon Street London Charing Cross London Clapham Junction London Euston London King’s Cross London Liverpool Street London Paddington London Victoria London Waterloo Manchester Piccadilly Reading St Pancras station is unaffected, Network Rail said. It was first understood that 20 stations were affected, but Network Rail has since confirmed that 19 Network Rail-managed stations are affected. The third-party provider of Wi-Fi at the stations is thought to be Telent. Telent provides ICT and communications services across transport, emergency services, higher education, network providers and the public sector, its website says. From MyLondon, via MSN (https://www.msn.com/en-gb/news/uknews/london-and-other-uk-train-stations-wi-fi-targeted-in-cyber-attack/ar-AA1rcFAg?ocid=msedgdhp&pc=U531&cvid=abb7e68b58f84adcacafd26716a95c01&ei=88) Quote includes - Passengers trying to log into the Wi-Fi service at London Euston and Victoria Stations, as well as Manchester Piccadilly and other major UK travel hubs, were met with a webpage about terror incidents in the UK. The page, seen by MyLondon, writes 'We love you, Europe' and appears to have an Islamophobic message, with details about Islamic extremist terror attacks in the UK. Network Rail confirmed the Wi-Fi services were suspended as enquiries take place. I'm surprised that Network rail use the same wifi network across all the stations. Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: Mark A on September 26, 2024, 09:47:29 It'll be one system and remotely managed (by Telent) perhaps.
Mark Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: ChrisB on September 26, 2024, 20:31:58 As these stations aren't close enough that one user might wander direct from one to another directly, there's little point in being one network - may as well each have their own so hackers only get into one at a time
Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: Ollie on September 26, 2024, 22:07:46 There has been an update to this;
From Sky News - Man who works for WiFi company arrested after train passengers receive Islamophobic messages https://news.sky.com/story/train-passengers-receive-islamophobic-messages-after-cyber-attack-13222280 Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: Chris from Nailsea on September 26, 2024, 22:09:51 Thanks for that update, Ollie. :)
Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: grahame on September 27, 2024, 02:54:41 As these stations aren't close enough that one user might wander direct from one to another directly, there's little point in being one network - may as well each have their own so hackers only get into one at a time There is sense in code and infrastructure singularity from a support viewpoint - change and maintain in one place with automated propagation. Efficiency, consistency for the user, etc. Title: Re: NR train stations wifi display terrorism message after cyber-security incident Post by: Electric train on September 27, 2024, 06:39:34 The public WiFi at Network Rail managed stations is a totally separate system to Network Rail internal IT systems, even to the extent it is "air gapped" and not just reliant on a software firewall.
This page is printed from the "Coffee Shop" forum at http://gwr.passenger.chat which is provided by a customer of Great Western Railway. Views expressed are those of the individual posters concerned. Visit www.gwr.com for the official Great Western Railway website. Please contact the administrators of this site if you feel that content provided contravenes our posting rules ( see http://railcustomer.info/1761 ). The forum is hosted by Well House Consultants - http://www.wellho.net |