Hello!

https://krebsonsecurity.com/2020/05/europes-largest-private-hospital- 
operator-fresenius-hit-by-ransomware/

==[begin]==

06 May 20
Europe's Largest Private Hospital Operator Fresenius Hit by Ransomware

Fresenius, Europe's largest private hospital operator and a major provider
of dialysis products and services that are in such high demand thanks to
the COVID-19 pandemic, has been hit in a ransomware cyber attack on its
technology systems.

==[end===


The article doesn't report HOW the ransomeware got triggered.

But if it was by some cleverly disguised email/link originally in an  
employee's email, why can't the outbound email servers be configured to  
only allow valid domains? ..and thus sending the bogus ones to the bit  
bucket.

WRT Email: Employees at places of work like the article describes,  
shouldn't even have access to email other than to company-related  
addresses.

WRT WWW: An employee shouldn't even be able to access links that are  
designed to be phish-bait.

Can't a company's local servers simply block all www domains except the  
ones approved?

Eg. People at work don't need to access Facebook or expose company  
computers to malicious sites.

  ../|ug

--- OpenXP 5.0.43