Microsoft warns of ransomware group targeting healthcare

Microsoft has identified a financially driven hacking group that is deploying INC ransomware to attack the U.S. healthcare sector.

Advertisement

In a Sept. 18 thread on X, formerly known as Twitter, Microsoft Threat Intelligence revealed that the group, known as Vanilla Tempest, has been active since 2022. 

The hacking group has targeted the healthcare, IT, and manufacturing sectors, using ransomware variants such as BlackCat, Rhysida, Quantum Locker and Zeppelin.

This is the group’s first time using INC ransomware to target the healthcare industry, according to Microsoft. 

At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.