The FBI Feb. 15 released an alert to help organizations detect and reduce the risk of network compromise from the Warzone Remote Access Trojan, a malware service used by over 7,000 cybercriminals and nation-state actors.

In other news, the Cybersecurity & Infrastructure Security Agency and other agencies recently released joint advisories to help organizations defend against Volt Typhoon and other cyber threat groups using living-off-the-land techniques to compromise and access U.S. critical infrastructure.

“Cyber threats related to nation-state adversaries are increasing at a very concerning rate, as evidenced in these alerts and in recent public statements by FBI, CISA and NSA leaders,” said John Riggi, AHA’s national advisor for cybersecurity and risk. “These threats are often fueled by global botnets such as Warzone that exploit remote access to steal passwords and conduct network reconnaissance, selling the information to a rogues gallery of cyber adversaries. Enforcement operations such as the FBI’s recent disruption of the Warzone botnet is significant and commendable, but must continue at a steady pace for lasting effect. The increased cyber threats posed by Russia and China in particular pose a serious threat to the physical safety of U.S. critical infrastructure and may directly or indirectly impact hospitals. To help mitigate the risk of these threats, the health care field is reminded to prioritize patching for internet-facing systems; deploy phishing-resistant multi-factor authentication; and ensure logging is turned on for application, access, and security logs and store logs in a central system.”

For more information on this or other cyber and risk issues, contact Riggi at jriggi@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.

Related News Articles

Headline
New guidance released yesterday by the Cybersecurity and Infrastructure Security Agency, National Security Agency and FBI informs health care and other…
Headline
A joint advisory released Nov. 20 by the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency and international partners warns of…
Headline
The Department of Justice Nov. 18 announced criminal charges against Evgenii Ptitsyn, a Russian national, for allegedly administering the sale, distribution…
Headline
A United Nations Security Council meeting the week of Nov. 4 discussed ransomware and the severe impacts that cyberattacks can have on hospitals and health…
Headline
AHA President and CEO Rick Pollack was recently a guest on Pinkston's "To the Point" podcast to discuss the future of U.S. health care, touching on a range of…
Headline
The Cybersecurity and Infrastructure Security Agency, FBI and other federal agencies have created a webpage with the latest cyberthreat updates and information…