U.S. and international cybersecurity authorities released an advisory to help health care and other critical infrastructure organizations identify and protect their networks from a People’s Republic of China state-sponsored group known as Volt Typhoon that uses built-in network administration tools to avoid detection.  

“The government advisory, along with Microsoft’s assessment, indicates this Chinese government-sponsored espionage campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “This does not appear to be a direct threat to U.S. health care at the moment. However, the advisory does serve as a reminder to ensure that emergency management and communication plans are fully integrated with cyber incident response plans, and take into account the potential loss of third-party mission-critical services, including telecommunications and internet services.” 

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.

Related News Articles

Headline
The Department of Health and Human Services Dec. 6 released a concept paper outlining its cybersecurity strategy for the health care sector, which builds…
Headline
Health care and other organizations that operate Unitronics Programmable Logic Controllers should protect the devices from potential compromise through default…
Headline
A Russian national Dec. 4 pleaded guilty to his role in developing and deploying a suite of malware tools known as Trickbot, used to launch ransomware attacks…
Headline
The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center is urging hospitals and other critical infrastructure to take…
Headline
Cyber actors attacking the Okta Help Center customer support management system in October downloaded a report containing the names and email addresses of all…
Headline
The U.S. Cybersecurity and Infrastructure Security Agency, U.K. National Cyber Security Centre and other global partners this week released recommended…