{"id":36749,"date":"2019-10-09T18:11:09","date_gmt":"2019-10-09T10:11:09","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=36749"},"modified":"2019-10-09T18:11:16","modified_gmt":"2019-10-09T10:11:16","slug":"healthcare-cyberattack-trends-in-2019","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2019\/10\/09\/healthcare-cyberattack-trends-in-2019\/","title":{"rendered":"Healthcare cyberattack trends in 2019"},"content":{"rendered":"\n

During the first five months of 2019, healthcare organizations were under nearly constant cyberattack attempts ranging from targeted phishing and customized ransomware incidents to more common exploits such as malware and botnets. <\/strong><\/p>\n\n\n\n

The examples below serve as a takeaway so that we can learn from what has come before.<\/p>\n\n\n\n

Traditional Healthcare Network Threats<\/strong><\/h2>\n\n\n\n

One of the most prevalent threats was the Android\/Generic.AP malware that targets Android mobile devices. Once installed on a phone, this trojan can capture keystrokes, collect system information, download\/upload files, perform denial-of-service attacks, and run\/terminate processes. In networks where healthcare providers rely on their mobile devices to provide real-time patient information, compromised phones can become a conduit for introducing additional malware into the network and gaining unauthorized access to patient information.

Botnets have been another challenge so far in 2019. Gh0st RAT is able to take full control of a victim\u2019s machine, as well as log keystrokes and hijack webcam and microphone data. Bladabindi is similar, but it can also steal stored credentials such as usernames\/passwords and other PII.<\/p>\n\n\n\n

Targeted Attacks<\/strong><\/h2>\n\n\n\n

We have also seen a spike in targeted attacks against healthcare networks. Incidences of an older trojan called Kwampirs, that targets the systems of MRI and X-ray machines and siphons their configuration data, have been documented being actively deployed inside specific networks.<\/p>\n\n\n\n

SamSam ransomware has also been targeting the healthcare industry, but we are now seeing<\/a> additional capabilities being developed and additional malware being included with the ransomware payload, which should worry security administrators.<\/p>\n\n\n\n

What You Can Do<\/strong><\/h2>\n\n\n\n

Four steps to security hygiene<\/em><\/h3>\n\n\n\n

The best place to start is with the basics. Best security hygiene practice involves four essential elements:<\/p>\n\n\n\n

  1. Patch your devices religiously.<\/li>
  2. Update hardware and software when possible.<\/li>
  3. Replace older systems that can no longer be patched or updated.<\/li>
  4. Implement strong proximity controls for systems that cannot be replaced.<\/li><\/ol>\n\n\n\n

    You can\u2019t secure what you can\u2019t see<\/em><\/h3>\n\n\n\n

    Visibility not only requires seeing every device on your network, but also knowing what they are and the role they play. Here are a few:<\/p>\n\n\n\n

    • Mission-Critical Systems<\/strong> \u2013 It\u2019s crucial that you understand your mission-critical processes, including critical care areas that cannot withstand downtime. <\/li>
    • Online Assets<\/strong> \u2013 Maintain an automatically updated inventory of every asset on your network. Those resources that rely on remote access, such as telemedicine or remote clinics, need extra attention.<\/li>
    • Extended Infrastructure<\/strong> \u2013 You need to not only understand your network topology, but cloud resources such as SaaS applications and infrastructures, as well as remote and branch offices.<\/li>
    • Medical IoT<\/strong> \u2013  Monitoring or treatment systems need to be identified, tracked, and secured, including mobile devices that move between hospital departments or even into patient homes. <\/li><\/ul>\n\n\n\n

      Segmentation is crucial<\/em><\/h3>\n\n\n\n

      Once an attacker manages to gain access to the network, they will continue to drive deeper to achieve their goals. Proper network segmentation can limit lateral movement, thereby slowing down attacks and even discouraging attackers \u2013 giving you more time for detection and response.  <\/p>\n\n\n\n

      Ransomware \u2013 not if, but when<\/em><\/h3>\n\n\n\n

      Given their user\u2019s preference for healthcare networks, healthcare IT administrators need to assume they will continue to be the target of a ransomware attack. Proper preparation includes an aggressive backup strategy, storing backups and recover systems offline, and running restoration drills so recovery can be fast and effective.<\/p>\n","protected":false},"excerpt":{"rendered":"

      The examples below serve as a takeaway so that we can learn from what has come before.<\/p>\n","protected":false},"author":6,"featured_media":36750,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,26],"tags":[169,54,3914],"class_list":["post-36749","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","category-opinions","tag-fortinet","tag-security","tag-security-platform"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/36749","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=36749"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/36749\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/36750"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=36749"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=36749"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=36749"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}