网络犯罪调查（2015）

CSI: Cyber S02E05

Part 2 Feb. 10, 2021, 5:44 p.m.

可以把他们都安排到重症监护室
We can move them to the ICU.
所以到底发生了什么
What exactly is happening here?
我们认为黑客往医院计算机系统
Well, we believe that the hackers injected malware
植入了恶意软件
into the hospital computer system.
这样他们就能掌控你们所有的联网医疗器械
And they may have control over all of your networked medical devices.
有多少病人需要使用
How many patients do you have hooked up
连接在你们系统上的器械
to devices on your system?
差不多175人
Roughly 175.
多快能让他们断网
How fast can you get them off-line?
我也不知道
I don't know.
我还得通报联邦执法部门
Uh, there's federal regulations I have to get by.
药监局健康管理局药师学会
FDA, OSHA, the ACA,
这段影像也阻止我们使用网络
and the video has locked us out of our network.
马克斯医生接入输液泵的病人均已断网
Dr. Marks, all patients on infusion pumps are off-network.
谢谢卢卡医生
Thank you, Dr. Luca.
继续通报我新进展
Keep me updated on the rest.
董事会同意
支付赎金
开始筹钱
医院董事会同意支付赎金
The hospital board has agreed to pay the ransom.
我强烈反对
I strongly advise against that.
为什么
Why?
灰色废墟刚在网上发布了一条新声明
Grey Ruin just released a new statement online,
声称他们不对此事件负责
claiming this is not their work.
我们也这么认为
And we believe them.
这不是他们的风格杀人索要赎金
It is not their M.O. to kill people and demand money.
我们认为更有可能是个人恩怨
No, it's more likely it's somebody with a personal vendetta,
有人冒充灰色废墟
somebody who's pretending to be Grey Ruin.
待我们调查完药剂泵便清楚了
And we'll know that once we analyze the drug pump.
给我们一份名单
We need a list.
员工病人
Employees, patients,
所有有动机损害医院名声的人
anyone who could have a motive to hurt the hospital.
还有两个小时
We've got two hours.
好
Okay.
好了来看下
All right, let's see.
没有找到任何指纹
Yeah, I'm not finding any prints.
绝对是远程侵入
So this must be a remote hack.
如果犯人留下了电子证据
If our target left any digital evidence,
我的程序会查到的
my program will find it.
药剂泵通过无线连接到医院网络
When drug pumps connect to the hospital's network over Wi-Fi,
让医护人员也能远程监控病人状况
allows the medical staff to remotely monitor their patients.
药剂泵都有自带的安全装置
The pumps have built-in safeguards
以防止推入致命剂量
that prevent lethal doses.
不幸的是黑客移除了安全装置
Unfortunately, the hackers removed these safeguards,
让他们有机会杀死琳赛·穆伦
which allowed them to kill Lindsey Mullen.
吗♥啡♥
最可怕的是
The scariest part is--
药剂泵不会验证操作它的人的身份
the pump doesn't authenticate who has access to it.
所以一旦目标进入了医院的网络
So once the target was in the hospital network,
他们可以对药剂泵为所欲为
they could do whatever they wanted to the drug pump.
没错
Yep.
看看这个
Check this out.
氧浓度101 脉搏85
Oxygen 101, pulse 85.
对吧
Right?
没有变化
No change.
看到了吧
See?
目标利用代码操控了
The target wrote code that manipulated the display
显示琳赛·穆伦生命体征的显示器
that showed Lindsey Mullen's vitals.
心率监控器也是通过无线网络工作的
So the heart rate monitor works over Wi-Fi as well.
对
Yep.
但我不明白的是
But the thing I don't get
如果凶手想让琳赛死
is if the target wanted Lindsey dead,
为什么要在她的心率监控器上做手脚呢
why would he mess with her heart rate monitor?
因为吗♥啡♥需要至少五分钟才能
Because it takes at least five minutes for morphine
导致心脏停搏
to cause cardiac arrest.
凶手需要那段时间来让她死亡
Target needed that time to kill her.
吗♥啡♥
凶手黑进了她的心率监控器
Target hacked her heart rate monitor,
让她的心率保持稳定
kept her heartbeat steady
这样医护人员就不会发现
so that the medical staff would not be alerted
并赶来抢救她
and come save her.
确保她的死亡
Guaranteed her death.
必须马上冲洗他的伤口
Have to irrigate his wound, stat.
瑞雯
Raven?
抱歉我打不开它了
Excuse me. I can't get in this.
危重症护理备用状态
Critical care bypass status.
所有人员注意我们已进入危重症护理备用状态
All personnel, we are on critical care bypass status.
D.B.
D.B.
D.B. 我帮你把它修好了
Hey D.B., I fixed it for you.
给你
There you go.
谢谢
Thank you.
西姆医生马上到重症监护室
Dr. Sim to the ICU, stat.
我听到有些护士在说闲话
I heard some of the nurses whispering.
是有人故意这么做的吗
Someone did this on purpose?
我和我的团队正在调查穆伦先生
My team and I are looking into it, Mr. Mullen.
我们去漂流了
We went rafting.
琳赛掉下了船
Lindsey went overboard.
把腿摔断了
she broke her leg.
没做手术吗
No surgery?
没有只是轻伤
No. It was a minor injury.
为什么会有人对她做这样的事
Why would someone do this to her?
我们还在调查这里到底发生了什么事
We're still investigating exactly what happened here.
我知道这话无法安慰你
I-I know it's no consolation to you,
但琳赛不是凶手的目标
but Lindsey was not the target.
我很遗憾
I-I'm sorry.
我真希望我能告诉你更多情况
I wish that there was more I could tell you right now.
这简直不像是真的
This doesn't seem real.
你来医院是为了好起来而不是为了去死
You come to a hospital to get better, not to die.
我们终于找到足够的护士维持人工输氧泵了
We finally found enough nurses to manually pump oxygen.
我们可以把病人跟呼吸机网络断开了
We can take patients off of network ventilators.
别那么做
Don't do it--
我在呼吸机的源代码中找到了一个死亡开关
I found a kill switch hidden in the source code of the ventilators.
如果你把病人跟呼吸机网络断开的话
If you take the ventilator patients off of the network,
它会给所有医疗设备发送一个冲击波
it'll send a shockwave to all the medical devices
除颤仪
和氧器生命体征
呼吸机
而且整个医院的电力系统将被切断
and power to the entire hospital will be cut.
包括备用发电机
Including the backup generators.
这会让依赖呼吸机
That will kill any patient
生存的病人全部死亡
relying on a ventilator to breathe for them.
人工输氧泵起不了作用
Uh, manually pumping oxygen won't matter.
你们的网络上有多少连着呼吸机的病人
How many ventilator patients do you have on the network?
九个大部分都在昏迷当中
Nine, most of them in comas.
打给指挥中心让克鲁米兹开始写补丁
Call CTOC, have Krumitz start working on a patch.
我们有别的麻烦了
We've got another problem.
电脑病毒传播到医院外面了
The computer virus spread outside the hospital.
她死了
She's dead.
除颤仪从没这样过
Never seen the defibrillator do this before.
出问题了
Something's wrong.
第二季第五集
犯罪现场调查：网络
以作非正常用途的计算机芯片
能够改变设备软件
改性芯片
对恶意代码很复杂
Yeah, the malware is sophisticated.
它通过无线网络和蓝牙传播
It spreads over Wi-Fi and Bluetooth.
我不明白
I-I don't understand.
你的除颤仪有蓝牙功能
Your defibrillator has Bluetooth technology,
允许它跟医院的电脑进行通信
allowing it to communicate with the hospital's computers,
以便医护人员能迅速地得到
so the medical staff can quickly access
病人的心率数据
your patient's heart rate data.
当你进入医院时
When you entered the hospital,
恶意代码从一台被感染的设备传播到了除颤仪上
the malware leaped onto your defib from an infected device.
我把病人的生命体征上传到护士站了
I uploaded a patient's vitals to the nurse's station.
我来告诉你就在那儿
Yes, I-I'll show you. Right over here.
太好了谢谢你