Join our subscribers
No reprieve for health care orgs as ransomware hits hospital operator, plastic surgeons
Thursday, May 7, 2020
If there was any lingering hope that cybercriminals would show mercy on health care providers during the COVID-19 crisis — as some claimed they would do — that pipe dream evaporated with the news that various ransomware groups attacked Fresenius, Europe’s largest private hospital operator, as well as a pair of U.S.-based plastic surgery clinics.
“Being mindful of COVID-19 social challenges, some cyber gangs decisively called to abstain from any attacks against medical and healthcare organizations, but unsurprisingly not everyone follows this Robin Hood code of ethics,” added Ilia Kolochenko, founder and CEO of ImmuniWeb.
Plastic surgery — especially the elective variety — is obviously not as vital of a medical service during the COVID-19 era. Nevertheless, by reportedly encrypting, exfiltrating and publicly leaking files that apparently belong to two plastic surgery practices, the operators behind Maze ransomware appear to have broken their previously stated commitment to avoid attacking and extorting health care providers during the pandemic. (Kroll, a division of Duff & Phelps, just released a detailed report on the latest TTPs of the Maze group.) Read Full Article
The Independent: Network security: NSA offers advice on tackling web shell malware
SC Media: Paay open database exposes 2.5M transactions, challenges PCI compliance
