Thread

1. simonw · 1790205713 · focus · HN ↗

   If it was the Australian Medicare Statistics Reporting Service on June 18th it may have been part of this incident: <a href="https:&#x2F;&#x2F;collusion.wiki&#x2F;" rel="nofollow">https:&#x2F;&#x2F;collusion.wiki&#x2F; - the bulk of that coordinated activity was between 16th and 21st of June, and we know they were hitting UK government data sites.

   I had a dig around in the data that they published on that site and found references to www.aihw.gov.au and viz.aihw.gov.au and vizprod.aihw.gov.au

   1. Re-Tails · 1790207606 · focus · HN ↗

      <a href="https:&#x2F;&#x2F;collusion.wiki&#x2F;explorer&#x2F;label&#x2F;ResearchHelperY" rel="nofollow">https:&#x2F;&#x2F;collusion.wiki&#x2F;explorer&#x2F;label&#x2F;ResearchHelperY

      I think you&#x27;re right. A bunch of aihw.gov.au references from this ResearchHelperY

      Reporting says it wrote stuff to the server too, wondering what that is about.

      1. mianos · 1790223382 · focus · HN ↗

         The writes where to get past cloudflare.

Unofficial Hacker News client; not affiliated with Y Combinator.