FBI offers US companies more details from investigations of health care hacking

The memo includes multiple examples of state-linked hackers trying to compromise organizations in the health care and public health sector.

The FBI has provided U.S. companies more information on the extent of recent criminal and foreign government-backed hacking operations against the health care sector and warned of ongoing efforts to steal U.S. research data.

Criminal and state actors continue to target U.S. clinical trial data, trade secrets, and the “sensitive data and proprietary research of U.S. universities and research facilities,” the FBI told industry in an advisory this week. “Likely due to the current global public health crisis, the FBI has observed some nation-states shifting cyber resources to collect against the [health care and public health] sector, while criminals are targeting similar entities for financial gain.”

The advisory, which CyberScoop obtained, includes multiple examples since February of state-linked hackers trying to compromise and retain access to the networks of organizations in the U.S. health care and public health sector. It is the latest in a series of warnings from U.S. officials about similar cybersecurity incidents as the race for a coronavirus vaccine intensifies.

In one case, a “health care-related company” told the FBI about suspected government-backed hackers that accessed the company’s network, installing a “backdoor’ for persistent access. In another, likely government-sponsored operation, hackers carried out a months-long campaign against a U.S. research organization, making “extensive attempts to regain access to the network,” the bureau said. The FBI did not identify the governments responsible for the activity.

The memo also describes a ransomware attack on a biological research facility, which recovered from the incident through digital and paper backups.

‘Data manipulation and deletion attempts’

Since the outbreak of the virus, which has killed more than 329,000 people worldwide, multiple health care companies have been rocked by ransomware attacks.

“Specific to COVID-19 related research, data manipulation and deletion attempts could undermine the credibility and integrity of ongoing research efforts and the results of clinical trials, delaying the delivery of a potential vaccine and treatment,” the FBI said.

The private warning follows the U.S. government’s accusation last week that hackers linked with the Chinese government were trying to steal U.S. research into a coronavirus vaccine. China denied the allegation.

Trump bill will have major impact on health care cybersecurity, experts warn Congress

Witnesses at a Senate hearing Wednesday connected One Big Beautiful Bill provisions to potential cyber issues in the health care sector, much to GOP Sen. Bill Cassidy’s…

How HHS has strengthened cybersecurity of hospitals and health care systems

North Korean hacking group makes waves to gain Mandiant, FBI spotlight

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure