H-ISAC TLP Green Threat Bulletin: Zeon Threat Group Impersonating Healthcare Patient Data Software Solutions

October 21, 2022

On October 20, Advanced Intelligence confirmed that the group began contacting employees of target organizations and achieved unauthorized access via the Zoho remote access tool.

Zeon is a threat group previously observed impersonating legitimate healthcare organizations delivering software solutions focused on patient data. The first wave identified impersonating legitimate healthcare software occurred in late September.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

National Advisor for Cybersecurity and Risk, AHA


(O) +1 202 626 2272