Healthcare websites being flooded with fake requests, HHS says

HHS’ Health Sector Cybersecurity Coordination Center is warning healthcare organizations to look out for flood distributed-denial-of-service attacks that could shut down their websites.

Advertisement

A trusted third party told HC3 that the fake domain name server requests have been targeting providers since at least November, according to the April 7 notice. The threat actors aim to overload servers with a large number of nonexistent or invalid requests, slowing down the websites.

HC3 provided these mitigation recommendations from cybersecurity company Netscout:

  • Blackhole route or filter suspected domains and servers.
  • Implement domain-name-server response rate limiting.
  • Block requests from the client’s IP address for a configurable period of time.
  • Be sure that cache refresh takes place, ensuring continuous service.
  • Lower the timeout for recursive name lookup to free up resources in the domain-name-service resolver.
  • Increase the time-to-live on existing records.
  • Apply rate-limiting on traffic to overwhelmed servers.

Becker’s 3rd Annual Fall Chief Pharmacy Officer Summit is the top tier event that the people leading the future of pharmacy convene. This 3-day event is built specifically for Chief Pharmacy Officers and senior pharmacy leaders. The sessions examine the workforce, financial and clinical priorities shaping pharmacy today. Becker’s is where candid discussions flourish and new ideas thrive. Becker's 3rd Annual Fall Chief Pharmacy Officer Summit

Advertisement

Next Up in Cybersecurity

Advertisement

Comments are closed.