Coveware, a ransomware response firm, identified the uptick in attackers launching cyberthreats with crypto-locking ransomware CryptoMix. The ransom notes claim that victims’ payments — typically made in bitcoin to unlock their stolen files — will go to a fictitious charity for kids with cancer, dubbed the International Children Charity Organisation. The attackers have also lifted information from crowdfunding websites aimed at helping raise money for medical treatments to back up their stories.
“We identified legitimate crowdfunding pages for the children whose images matched those in the ransom notes,” reads a Coveware blog post, according to HealthcareInfoSecurity. “We also notified the families of the children whose images could be positively identified. Despite the upsetting nature of the news, we felt that the families had a right to know.”
“We are guessing this tactic is meant to assuage the moral hazard associated with paying a ransom,” the blog post continues. “It goes without saying that these cybercriminals did think this through. It is poignantly obvious that the charity is fake, and that the details of the child’s case are lifted from other sites.”
More articles on cybersecurity:
Cyberattacks, cloud-based storage & more: 4 hospital CISOs share insights
Man gets 10 years for hacking network of Boston Children’s Hospital
Phishing breach at Michigan rehab center exposes patients’ PHI
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.