The cyber attack that has shut down IT services at several Victorian hospitals is understood to involve ransomware called Ryuk that has been targeting large enterprises internationally, including healthcare systems in the US and Canada.

The attackers attempt to enter organisational networks through phishing emails with the intention of encrypting data. Ryuk has been active since August last year.