Feds warn against 2 ransomware groups targeting healthcare

The Health Sector Cybersecurity Coordination Center issued a brief Jan. 12 warning the healthcare sector about the tactics and exploitation techniques used by Royal ransomware and BlackCat ransomware, two ransomware groups that have been aggressively targeting the U.S. healthcare sector.

Advertisement

Seven things to know about the ransomware groups, according to HHS:

  1. Royal ransomware was first observed in 2022 and is a “relatively new, but highly capable” threat to the healthcare sector.
  2. Royal is the ransomware of choice for some experienced operators, including those who previously took part in Conti ransomware operations.
  3. Royal is a financially motivated group and has a history of victimizing the healthcare sector.
  4. BlackCat ransomware was first detected in November 2021 and compromised at least 60 victims in just four months.
  5. The group is suspected to be a successor of the notorious Darkside/BlackMatter groups.
  6. The group has stated that it does not attack state medical institutions, hospitals and ambulances. However, it is not against targeting private clinics and pharmaceutical companies.
  7. BlackCat leverages two encryption algorithms and six encryption modes.

Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.