healthcare

Protecting health care

Health-care facilities are struggling with the current coronavirus epidemic, so we must help them with cyberprotection. We are offering free six-month licenses for our core solutions.

Nikolay Pankov
March 23, 2020

For the average, law-abiding person, the coronavirus COVID-19 is simply a health hazard. Unfortunately, some cybercriminals perceive the epidemic as an additional opportunity to launch a cyberattack. Right now, medical organizations need qualified information infrastructure protection as never before.

Incidents

Taking advantage of widespread public fears about COVID-19, phishers began to use the topic as a hook. That’s maybe half the trouble — without the coronovirus, they would have used something else. But consider opportunistic cybercriminals attacking the information infrastructure of medical institutions, obviously hoping that with the general overload on IT services, they’ll have an easier time breaking in to clinics’ networks.

Brno University Hospital

A clinic in the Czech city of Brno reported a cyberattack last week. It hasn’t disclosed details of the incident, but hospital representatives say the attack caused database problems. The hospital can examine patients but cannot save medical data to the server, and the clinic had to cancel several operations and redirect patients to other institutions. However, the University Hospital in Brno is one of the largest Czech centers for coronavirus testing, making incident management a matter of life or death.

US Health and Human Services Department

The US Health and Human Services Department (HHS) apparently also suffered a cyberattack on the evening of Sunday, March 13. Bloomberg reported it as a massive DDoS attack meant to sabotage the normal operation of HHS servers, “undermining the response to the coronavirus pandemic.” With the agency needed to coordinate efforts to counter the coronavirus, such an attack can do much more damage than usual.

UK worker credential phishing

We have been monitoring cases of coronavirus-related phishing for several weeks now, and Sky News recently wrote about a rather unusual phishing campaign aimed specifically at medical personnel — one that’s been getting through medical organizations’ internal IT controls. The letters seemed to be announcing a seminar on coronavirus, and they contained a registration link. That link led to a phishing page disguised as Microsoft’s Outlook Web App, where attackers were collecting login credentials. Where and how cybercriminals will use this data is yet unknown.