Cisco Talos Advisory on Adversaries Targeting the Healthcare and Public Health Sector
Summary: Cisco Talos reported that an adversary is using the Trickbot banking trojan and Ryuk ransomware to target U.S. hospitals and healthcare providers at an increasing rate, with six U.S. hospitals compromised with Ryuk in the span of 24 hours on October 28 and 29, 2020. CISA, the FBI, and HHS released a joint advisory on October 28, 2020 confirming the activity and calling the threat "increased and imminent."
Why it matters: Talos said roughly 20 percent of its incident response engagements this quarter involved threats affecting the healthcare sector, and that from June to September over 66% of its ransomware engagements involved Cobalt Strike.
Read the original at Cisco Talos ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026