US disrupts North Korean hackers that targeted hospitals
2 years, 5 months ago

US disrupts North Korean hackers that targeted hospitals

Associated Press  

NEW YORK — The FBI and Justice Department recently disrupted the activities of a hacking group that was Monaco revealed new details of the attacks during a speech in which she encouraged organizations hit by ransomware to report the crime to law enforcement, both so that officials can investigate and so that they can help victim companies try to get ransom payments back. In this case, Monaco said, a Kansas hospital that paid a ransom last year after being attacked by ransomware also contacted the FBI, which traced the payment and identified China-based money launderers who assisted the North Korean hackers in cashing out the illicit proceeds. “We can follow the money and get it back; we can help prevent the next attack, the next victim; and we can hold cybercriminals accountable.” U.S. officials in 2021 scrambled to confront a wave of high-profile ransomware attacks — in which hackers encrypt or lock up a victim’s data and demand exorbitant sums to return it — including against a crucial fuel pipeline on the East Coast. “They’re exfiltrating the information, they’re threatening to release your proprietary information.” This particular variant of ransomware, known as “Maui,” specifically targeted hospitals and public health organizations around the country.

Ransom Ransomware Hospital Payment Kansas Fbi Monaco North Korean  korean  payment  hospital  fbi  report  officials  north  kansas  ransom  monaco  hackers  hospitals  disrupts  ransomware  targeted

History of this topic

Cyberattacks plague health care. Critics call the federal response 'inadequate'
3 months, 1 week ago

Cyberattacks plague health care. Critics call the federal response 'inadequate'

NPR  

Cyberattacks plague health care. The Health and Human Services Department’s “current approach to health care cybersecurity — self-regulation and voluntary best practices — is woefully inadequate and has left the health care system vulnerable to criminals and foreign government hackers,” Sen. Ron Wyden, chair of the Senate Finance Committee, wrote in a recent letter to the agency. The department’s interest …

Ransomware attack disables computers at blood center serving 250 hospitals in southeast US
4 months, 3 weeks ago

Ransomware attack disables computers at blood center serving 250 hospitals in southeast US

Associated Press  

ORLANDO, Fla. — A not-for-profit blood center serving much of the southeastern United States is facing a ransomware attack, officials said Wednesday. To manage its blood supply, the blood center was asking more than 250 hospitals to activate their critical blood shortage protocols. The blood center also was using manual processes to maintain basic operations, officials said. Blood centers across …

US plans to hunt down North Korean hackers who attacked healthcare, defence networks
4 months, 4 weeks ago

US plans to hunt down North Korean hackers who attacked healthcare, defence networks

Firstpost  

The FBI has been collecting evidence against a hacking group called Andariel, which is considered a part of the larger North Korean Lazarus group. These hackers have been using US-based tech infrastructure to carry out their attacks The US is ramping up efforts to track down North Korean hackers responsible for attacking healthcare and defence networks. An email address found …

North Korean charged in cyberattacks on US hospitals, NASA and military bases
4 months, 4 weeks ago

North Korean charged in cyberattacks on US hospitals, NASA and military bases

Associated Press  

KANSAS CITY, Kan. — A North Korean military intelligence operative has been indicted in a conspiracy to hack into American health care providers, NASA, U.S. military bases and international entities, stealing sensitive information and installing ransomware to fund more attacks, federal prosecutors announced Thursday. He’s accused of targeting 17 entities across 11 U.S. states, including NASA and U.S. military bases, …

Indonesia won't pay an $8 million ransom after a cyberattack compromised its national data center
5 months, 4 weeks ago

Indonesia won't pay an $8 million ransom after a cyberattack compromised its national data center

Hindustan Times  

JAKARTA, Indonesia — Indonesia's national data center has been compromised by a hacking group asking for a $8 million ransom that the government says it won't pay. The attackers have held data hostage and offered a key for access in return for the $8 million ransom, said PT Telkom Indonesia’s director of network & IT solutions, Herlan Wijanarko, without giving …

Indonesia won't pay an $8 million ransom after a cyberattack compromised the national data center
5 months, 4 weeks ago

Indonesia won't pay an $8 million ransom after a cyberattack compromised the national data center

Hindustan Times  

JAKARTA, Indonesia — Indonesia's national data center has been compromised by a hacking group asking for a $8 million ransom that the government says it won't pay. The attackers have held data hostage and offered a key for access in return for the $8 million ransom, said PT Telkom Indonesia’s director of network & IT solutions, Herlan Wijanarko, without giving …

Change Healthcare to start notifying customers who had data exposed in cyberattack
6 months ago

Change Healthcare to start notifying customers who had data exposed in cyberattack

Associated Press  

Change Healthcare is starting to notify hospitals, insurers and other customers that they may have had patient information exposed in a massive cyberattack. Change Healthcare, a subsidiary of health care giant UnitedHealth Group, provides technology used to submit and process billions of insurance claims a year. The attack triggered a disruption of payment and claims processing around the country, stressing …

Security News This Week: Ransomware Attacks Are Getting Worse
6 months, 1 week ago

Security News This Week: Ransomware Attacks Are Getting Worse

Wired  

Despite years worth of efforts to eliminate the scourge of ransomware targeting schools, hospitals, and critical infrastructure worldwide, experts are warning that the crisis is only heating up, with criminal gangs growing ever more aggressive in their tactics. United States lawmakers and intelligence officials are circling their wagons following the revelation of Israel’s involvement in a malign influence campaign that …

Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout
6 months, 1 week ago

Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout

Wired  

When Change Healthcare paid $22 million in March to a ransomware gang that had crippled the company along with hundreds of hospitals, medical practices, and pharmacies across the US, the cybersecurity industry warned that Change's extortion payment would only fuel a vicious cycle: Rewarding hackers who had carried out a ruthless act of sabotage against the US health care system …

Experts examine how hackers took down a top digital health care payment system
8 months, 2 weeks ago

Experts examine how hackers took down a top digital health care payment system

NPR  

Experts examine how hackers took down a top digital health care payment system Pharmacies have a backlog of insurance claims waiting to be paid after the payment system was hacked in February. That's after hackers took down one of the top digital payment systems for the health care industry in late February. The health care industry has been a top …

Health care company ties Russian-linked cybercriminals to prescriptions breach
9 months, 3 weeks ago

Health care company ties Russian-linked cybercriminals to prescriptions breach

NPR  

Health care company ties Russian-linked cybercriminals to prescriptions breach Enlarge this image toggle caption Chris Carlson/AP Chris Carlson/AP A ransomware attack is disrupting pharmacies and hospitals nationwide, leaving patients with problems filling prescriptions or seeking medical treatment. On Thursday, UnitedHealth Group accused a notorious ransomware gang known as Black Cat, or AlphV, of hacking health care payment systems across the …

A large US health care tech company was hacked. It’s leading to billing delays and security concerns
9 months, 3 weeks ago

A large US health care tech company was hacked. It’s leading to billing delays and security concerns

Associated Press  

Health care providers across the country are reeling from a cyberattack on a massive U.S. health care technology company that has threatened the security of patients’ information and is delaying some prescriptions and paychecks for medical workers. “Patient care is our top priority and we have multiple workarounds to ensure people have access to the medications and the care they …

Ransomware attack knocks 20 Romanian hospitals offline: Report
10 months, 1 week ago

Ransomware attack knocks 20 Romanian hospitals offline: Report

The Hindu  

A ransomware attack on Hipocrate Information System, used by hospitals to manage medical activity and patient data knocked, impacted at least 21 hospitals in Romania forcing them offline. The incident, currently under investigation, impacted various hospitals across Romania, including regional and cancer treatment centers, a report from the Bleeping Computer said. There is no information on what ransomware operation targeted …

Ransomware attack prompts multistate hospital chain to divert some emergency room patients elsewhere
1 year ago

Ransomware attack prompts multistate hospital chain to divert some emergency room patients elsewhere

Associated Press  

NASHVILLE, Tenn. — A ransomware attack has prompted a health care chain that operates 30 hospitals in six states to divert patients from some of its emergency rooms to other hospitals while postponing certain elective procedures. By Tuesday afternoon, more than half of Ardent’s 25 emergency rooms had resumed accepting some patients by ambulance or by fully lifting their “divert” …

Ransomware attacks against hospitals put patients' lives at risk, researchers say
1 year, 2 months ago

Ransomware attacks against hospitals put patients' lives at risk, researchers say

NPR  

Ransomware attacks against hospitals put patients' lives at risk, researchers say Increasingly, hospitals have been the target of ransomware attacks. Ransomware attacks in health care more than doubled between 2016 and 2021, exposing tens of millions of patients' health information and forcing facilities to divert ambulances and delay surgeries. LEVI: Saad Chaudhry, the chief digital and information officer for Maryland's …

A cyberattack has disrupted hospitals and health care...
1 year, 4 months ago

A cyberattack has disrupted hospitals and health care...

Daily Mail  

A cyberattack has wreaked havoc on hospital computer systems in five states, forcing some emergency rooms to close and ambulances to be diverted. One of the biggest healthcare hacks in US history last year saw a three-year-old boy in Iowa accidentally given a megadose of opioids after hospital computer systems were shut down. Some 16 hospitals across five states have …

A Russian ransomware gang breaches the Energy Department and other federal agencies
1 year, 6 months ago

A Russian ransomware gang breaches the Energy Department and other federal agencies

Associated Press  

The Department of Energy and several other federal agencies were compromised in a Russian cyber-extortion gang’s global hack of a file-transfer program popular with corporations and governments, but the impact was not expected to be great, Homeland Security officials said Thursday. Known victims to date include Louisiana’s Office of Motor Vehicles, Oregon’s Department of Transportation, the Nova Scotia provincial government, …

Cyberattacks on health care are increasing. Inside one hospital's fight to recover
1 year, 7 months ago

Cyberattacks on health care are increasing. Inside one hospital's fight to recover

NPR  

Cyberattacks on health care are increasing. Inside one hospital's fight to recover Enlarge this image toggle caption Farah Yousry/WFYI Farah Yousry/WFYI It was October 2021 and the staff at Johnson Memorial Health were hoping they could finally catch their breaths. Enlarge this image toggle caption Farah Yousry/WFYI Farah Yousry/WFYI "You ask many CEOs across the country, 'What keeps you up …

Ransomware attack affects Dallas police, court websites
1 year, 7 months ago

Ransomware attack affects Dallas police, court websites

The Independent  

For free real time breaking news alerts sent straight to your inbox sign up to our breaking news emails Sign up to our free breaking news emails Sign up to our free breaking news emails SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy policy Dallas was hit with a …

Hacking the hackers: How the FBI and hacktivists infiltrated ransomware gang Hive and recovered millions
1 year, 10 months ago

Hacking the hackers: How the FBI and hacktivists infiltrated ransomware gang Hive and recovered millions

Firstpost  

In a rather interesting FBI operation that would make a great Hollywood flick, the FBI’s cybersecurity division and a few international hacktivist groups came together to go after one of the most notorious ransomware gangs in the world, Hive, shut down a significant portion of their operations, and recovered about $130 million from them. Attorney General Merrick Garland and other …

US infiltrates big ransomware gang: ‘We hacked the hackers’
1 year, 10 months ago

US infiltrates big ransomware gang: ‘We hacked the hackers’

Associated Press  

WASHINGTON — The FBI and international partners have at least temporarily disrupted the network of a prolific ransomware gang they infiltrated last year, saving victims including hospitals and school districts a potential $130 million in ransom payments, Attorney General Merrick Garland and other U.S. officials announced Thursday. Officials said the targeted syndicate, known as Hive, is among the world’s top …

North Korea behind $100m crypto theft, FBI says
1 year, 11 months ago

North Korea behind $100m crypto theft, FBI says

Al Jazeera  

California-based Harmony said in June it had been the target of a cyberattack that stole $100m worth of digital assets. North Korean hackers were behind the theft of $100m worth of digital assets from a US crypto firm last year, according to United States law enforcement. North Korean cyber actors earlier this month used privacy protocol Railgun to launder more …

North Korean hackers used Itaewon tragedy for malware: Google
2 years ago

North Korean hackers used Itaewon tragedy for malware: Google

Al Jazeera  

Google’s anti-hacking unit says state-backed hackers exploited the Halloween disaster to target internet users with malware. North Korean hackers exploited South Korea’s deadly Halloween crowd crush to target internet users with malware, according to a report by Google’s anti-hacking unit. The state-backed hackers planted malicious software in Microsoft Office documents disguised to look like a South Korean government report on …

India's Cyber Security: AIIMS Attack Stresses Need For International Cooperation
2 years, 1 month ago

India's Cyber Security: AIIMS Attack Stresses Need For International Cooperation

The Quint  

The emergence of Ransomware-as-a-Service gangs has become a force multiplier. This year, more than 25 known cases of major ransomware attacks have been reported where ransom in billions have been demanded and many victims have negotiated and paid to avoid business and reputational loss. The transnational angle of these crimes and casual cooperation among law enforcement bodies add to the …

ANOTHER hospital system goes down in cyberattack: Half a million records in Texas 'are leaked'
2 years, 1 month ago

ANOTHER hospital system goes down in cyberattack: Half a million records in Texas 'are leaked'

Daily Mail  

The hospital group is being sued by two patients for acting ‘in a reckless manner' with their personal data They claimed to have over a million patient records that they will release 'soon' in two further leaks online OakBend Medical Center said 500,000 individuals were affected by the breach, but it could be over a million Have YOU or anyone …

IT system that holds medical records of 20million Americans hit in cyberattack
2 years, 2 months ago

IT system that holds medical records of 20million Americans hit in cyberattack

Daily Mail  

The medical records of up to 20million Americans may have been leaked in what could turn out to be the biggest medical cyberattack in US history. The system serves more than 20 million patients and has 140 hospitals across 21 states A CommonSpirit spokesman admitted that electronic health records and other systems had been taken offline. Brett Callow, a threat …

Hospital chain attack part of ongoing cybersecurity concerns
2 years, 2 months ago

Hospital chain attack part of ongoing cybersecurity concerns

Associated Press  

CHICAGO — Diverted ambulances. Despite the lingering questions, the incident underscores the growing concerns surrounding ransomware attacks on health care systems with patient care at stake. Brett Callow, a threat analyst with cybersecurity provider Emsisoft, said the incident could be “the most significant attack on the health care sector to date” if all CommonSpirit hospitals and other facilities were affected. …

Explained | What kept cybersecurity busy in 2021?
3 years ago

Explained | What kept cybersecurity busy in 2021?

The Hindu  

As the pandemic kept people connected to their devices for yet another year, cyberattacks and data breaches raged on. The breach was reported to the company in February, and involved personal data including name, date of birth, contact information, passport information, ticket information, Star Alliance and Air India frequent flyer data but no passwords data or credit cards data were …

Web of deceit: The rising threat of ransomware
3 years, 1 month ago

Web of deceit: The rising threat of ransomware

The Telegraph  

“The first few cases were in 2013, but it’s gotten worse,” says Kurtis Minder, chief executive of GroupSense, based in Arlington, Virginia. And nobody’s really noticed what’s happening, until Colonial and JBS.” Those were two significant ransomware attacks. “It’s a shocking attack on a health service, but fundamentally on the patients and the Irish public.” Yet even that isn’t the …

Ransomware hackers targeted three US water facilities in 2021, cyber officials say
3 years, 2 months ago

Ransomware hackers targeted three US water facilities in 2021, cyber officials say

The Independent  

The latest headlines from our reporters across the US sent straight to your inbox each weekday Your briefing on the latest headlines from across the US Please enter a valid email address Please enter a valid email address SIGN UP I would like to be emailed about offers, events and updates from The Independent. Please try again later {{ /verifyErrors …

Hackers take over Indiana hospital and force ambulances to be turned away
3 years, 4 months ago

Hackers take over Indiana hospital and force ambulances to be turned away

The Independent  

The latest headlines from our reporters across the US sent straight to your inbox each weekday Your briefing on the latest headlines from across the US Your briefing on the latest headlines from across the US SIGN UP I would like to be emailed about offers, events and updates from The Independent. The ransomware attack paralysed Eskenazi Health, which runs …

$10 million rewards bolster White House anti-ransomware bid
3 years, 5 months ago

$10 million rewards bolster White House anti-ransomware bid

The Independent  

The latest headlines from our reporters across the US sent straight to your inbox each weekday Your briefing on the latest headlines from across the US Your briefing on the latest headlines from across the US SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy policy The Biden administration will …

Russia-based ransomware gang offline but cause not clear
3 years, 5 months ago

Russia-based ransomware gang offline but cause not clear

Associated Press  

WASHINGTON — The Russia-based criminal syndicate behind a devastating series of recent ransomware attacks was offline on Tuesday, but cybersecurity experts said that it was premature to speculate why and that there was no indication of a law enforcement takedown. It was also possible that the group was laying low after the attack, or switching methods “as we did expose …

Russian-based ransomware group ‘REvil’ disappears after hitting US businesses
3 years, 5 months ago

Russian-based ransomware group ‘REvil’ disappears after hitting US businesses

The Independent  

Sign up for the daily Inside Washington email for exclusive US coverage and analysis sent to your inbox Get our free Inside Washington email Get our free Inside Washington email SIGN UP I would like to be emailed about offers, events and updates from The Independent. The New York Times reported that dark web pages purporting to belong to the …

Scale, details of massive Kaseya ransomware attack emerge
3 years, 5 months ago

Scale, details of massive Kaseya ransomware attack emerge

Associated Press  

BOSTON — Cybersecurity teams worked feverishly Sunday to stem the impact of the single biggest global ransomware attack on record, with some details emerging about how the Russia-linked gang responsible breached the company whose software was the conduit. CEO Fred Voccola of the breached software company, Kaseya, estimated the victim number in the low thousands, mostly small businesses like “dental …

Hackers behind huge ransomware attack demand $70m
3 years, 5 months ago

Hackers behind huge ransomware attack demand $70m

Al Jazeera  

A ransom demand was posted on a site typically used by the REvil cybercrime gang, a Russia-linked group. The demand was posted late Sunday night on a site typically used by the REvil cybercrime gang, a Russia-linked group that is counted among the cybercriminal world’s most prolific extortionists. The gang has an affiliate structure, occasionally making it difficult to determine …

Ransomware hits hundreds of US companies, security firm says
3 years, 5 months ago

Ransomware hits hundreds of US companies, security firm says

Associated Press  

WASHINGTON — A ransomware attack paralyzed the networks of at least 200 U.S. companies on Friday, according to a cybersecurity researcher whose company was responding to the incident. The REvil gang, a major Russian-speaking ransomware syndicate, appears to be behind the attack, said John Hammond of the security firm Huntress Labs. “Kaseya handles large enterprise all the way to small …

Ransomware hits hundreds of US companies, security firm says
3 years, 5 months ago

Ransomware hits hundreds of US companies, security firm says

India Today  

A ransomware attack paralysed the networks of at least 200 US companies on Friday, according to a cybersecurity researcher whose company was responding to the incident. The REvil gang, a major Russian-speaking ransomware syndicate, appears to be behind the attack, said John Hammond of the security firm Huntress Labs. “Kaseya handles large enterprise all the way to small businesses globally, …

A 'Colossal' Ransomware Attack Hits Hundreds Of U.S. Companies, A Security Firm Says
3 years, 5 months ago

A 'Colossal' Ransomware Attack Hits Hundreds Of U.S. Companies, A Security Firm Says

NPR  

A 'Colossal' Ransomware Attack Hits Hundreds Of U.S. Companies, A Security Firm Says Enlarge this image toggle caption Jenny Kane/AP Jenny Kane/AP WASHINGTON — A ransomware attack paralyzed the networks of at least 200 U.S. companies on Friday, according to a cybersecurity researcher whose company was responding to the incident. The REvil gang, a major Russian-speaking ransomware syndicate, appears to …

Ransomware hits hundreds of US companies, security firm says
3 years, 5 months ago

Ransomware hits hundreds of US companies, security firm says

The Independent  

For free real time breaking news alerts sent straight to your inbox sign up to our breaking news emails Sign up to our free breaking news emails Sign up to our free breaking news emails SIGN UP I would like to be emailed about offers, events and updates from The Independent. The REvil gang, a major Russian-speaking ransomware syndicate, appears …

Wray: FBI frowns on ransomware payments despite recent trend
3 years, 6 months ago

Wray: FBI frowns on ransomware payments despite recent trend

Associated Press  

WASHINGTON — The FBI’s director told lawmakers Thursday that the bureau discourages ransomware payments to hacking groups even as major companies in the past month have participated in multimillion-dollar transactions aimed at getting their systems back online. “It is our policy, it is our guidance, from the FBI, that companies should not pay the ransom for a number of reasons,” …

US recovers most of ransom paid after Colonial Pipeline hack
3 years, 6 months ago

US recovers most of ransom paid after Colonial Pipeline hack

Associated Press  

WASHINGTON — The Justice Department has recovered most of a multimillion-dollar ransom payment made to hackers after a cyberattack that caused the operator of the nation’s largest fuel pipeline to halt its operations last month, officials said Monday. “By going after the entire ecosystem that fuels ransomware and digital extortion attacks — including criminal proceeds in the form of digital …

Ransomware attacks saddle Biden with grave national security crisis
3 years, 6 months ago

Ransomware attacks saddle Biden with grave national security crisis

CNN  

CNN — The Biden administration Sunday confronted the implications of a sudden and grave national security challenge as ransom-demanding cyber hackers target the staples of American life – food, gas, water, hospitals and transport. Secretary of State Antony Blinken said during a congressional hearing on Monday that Biden would make clear when he saw the Russian leader that “states cannot …

Opinion: A favor from Russian ransomware hackers
3 years, 6 months ago

Opinion: A favor from Russian ransomware hackers

CNN  

Editor’s Note: Frida Ghitis, a former CNN producer and correspondent, is a world affairs columnist. CNN — When President Joe Biden meets with Russian President Vladimir Putin later this month, he will undoubtedly bring up – as he should – the matter of repeated ransomware attacks against US targets by Russian-based hackers. Given the strained relationship between both countries, one …

Hospitals targeting hackers release patient data to the media
3 years, 6 months ago

Hospitals targeting hackers release patient data to the media

The Hindu  

Hackers who targeted hospitals in New Zealand's Waikato district have released what appears to be private patient information to media outlets, as health systems struggled to come back online more than a week after the attack. A group claiming responsibility for the Waikato District Health Board cyber attack that took place last week released scores of official looking records and …

Ransomware gangs disrupted by response to Colonial Pipeline hack
3 years, 7 months ago

Ransomware gangs disrupted by response to Colonial Pipeline hack

The Hindu  

Multiple ransomware groups claimed they were shutting down or scaling back operations on Friday as the U.S. government ramped up pressure while tech companies, cryptocurrency exchanges and others worried about getting caught in the crossfire. Another major criminal gang said it would forbid encryption attacks on critical infrastructure, and forums where such gangs recruit partners said they were banning ads …

Irish health system targeted in ‘serious’ ransomware attack
3 years, 7 months ago

Irish health system targeted in ‘serious’ ransomware attack

Associated Press  

LONDON — Ireland’s health service shut down its IT systems on Friday after being targeted in a ransomware attack by what it called “international criminals.” Appointments and elective surgeries were canceled at several hospitals and Deputy Prime Minister Leo Varadkar said the disruption could last for days. Varadkar called the attack “very serious.” “It’s coming at a time when the …

D.C. Police Department Victim Of Apparent Ransomware Attack
3 years, 7 months ago

D.C. Police Department Victim Of Apparent Ransomware Attack

NPR  

D.C. Police Department Victim Of Apparent Ransomware Attack Enlarge this image toggle caption Michael M. Santiago/Getty Images Michael M. Santiago/Getty Images Potentially sensitive information from the Washington, D.C., police department was allegedly breached by a ransomware attack from a group seeking a payout. It's unclear whether the Metropolitan Police Department paid the attackers to prevent the potentially sensitive information from …

US takes new aim at ransomware after most costly year
3 years, 8 months ago

US takes new aim at ransomware after most costly year

The Independent  

For free real time breaking news alerts sent straight to your inbox sign up to our breaking news emails Sign up to our free breaking news emails Sign up to our free breaking news emails SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy policy The Justice Department is taking …

Discover Related