Huntress Report Highlights Cyber Threats Targeting Healthcare
Summary
Huntress says its endpoint and user data show healthcare facing trojans, RATs, RMM abuse, ransomware and business email compromise, including malicious inbox rules and VPN or proxy use.
Key points
- Huntress says its analysis drew on data from millions of monitored endpoints and user entities.
- The article lists trojans (21.1%), RATs (14.3%) and RMM abuse (9.6%) among common healthcare threats.
- It reports that Dharma, DarkGate and LockBit accounted for 29%, 17% and 15% of healthcare ransomware attacks, respectively.
- The report summary says 34% of Microsoft 365 threats in healthcare involved malicious inbox rules and 26% involved VPN or proxy use.
- Huntress says ransomware attacks surged in late 2023 after Qakbot was taken down.
Article Details
- Event Type
- Cyber threat report findings on threats targeting healthcare organizations
- Impact
- Huntress reported that healthcare threats included Trojans (21.1%), Remote Access Trojans (14.3%), and Remote Monitoring and Management abuse (9.6%). It identified Dharma (29%), DarkGate (17%), and LockBit (15%) as common ransomware families targeting healthcare. The report said ransomware can disrupt operations and patient care, and that ransomware attacks surged in late 2023 after Qakbot was taken down. It also reported that 34% of Microsoft 365 threats in healthcare involved malicious inbox rules and 26% involved VPN or proxy use.