Philadelphia, which Forcepoint describes as an “unsophisticated ransomware kit,” is sold for a few hundred dollars. Hackers deploy the ransomware using a phishing email, which redirects the user to a personal storage site. This site downloads a file with the hospital logo and a set of fake patient information documents. By clicking these icons, the user executes the Philadelphia ransomware.
In its analysis, Forcepoint notes the encrypted code includes the phrase “hospitalspam” and the ransomware command includes “hospital/spam,” suggesting the ransomware creator is specifically targeting hospitals.
“Individually, this may not be a great deal of an attack toward the healthcare sector,” according to Forcepoint. “However, this may signify the start of a trend wherein smaller ransomware operators empowered by [ransomware-as-a-service] platforms will start aiming for this industry, ultimately leading to even bigger and diversified ransomware attacks against the healthcare sector.”
More articles on health IT:
ONC unveils $180k data challenge
Scripps Health goes live on Epic EHR
Intermountain Healthcare Innovation Fund invests $1M in Redox
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.