[{"innerBlocks":[],"name":"core\/freeform","postId":2221,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Data security vendor Symantec is warning of a new and significantly dangerous hacker ring targeting large healthcare organizations in the United States, Europe and Asia.

\u201cSymantec has identified a previously unknown group called Orangeworm that has been observed installing a custom backdoor called Trojan.Kwempirs,\u201d the vendor notes.

Orangeworm is looking for targets to engage in corporate espionage in healthcare and other industries. Targets are chosen carefully and deliberately with extensive planning before an attack is made, Symantec experts contend.

Data from the security organization suggests that healthcare is the top target for the hackers\u2014it says that 39 percent of attacks have been aimed at healthcare organizations, with manufacturing, information technology, logistics and agriculture also in their crosshairs.

Also See:<\/b> Why patient confidence hinges on medical device security<\/a>

So far, Symantec has found Kwempirs malware placed on diagnostic imaging machines in healthcare organizations. Additionally, Orangeworm was observed to have an interest in machines used to assist patients in completing consent forms for required procedures.

The vendor acknowledges that exact motives of the Orangeworm group are unclear, but the company believes other industries have been targeted as part of a larger supply chain attack to enable Orangeworm to get access to healthcare organizations.

\u201cWhile these industries appear to be unrelated, we found them to have multiple links to healthcare, such as large manufacturers that produce medical imaging devices sold directly into healthcare firms, IT organizations that provide support services to medical clinics, and logistical organizations that deliver healthcare products.\u201d

The installed backdoor into an organization collects information from the infected computer, which Symantec surmises can help a hacker know if the computer is used by a researcher or a higher-value target. \u201cOnce Orangeworm determines that a potential victim is of interest, it proceeds to aggressively copy the backdoor across open network shares to infect other computers.\u201d

Further, with healthcare\u2019s reliance on older operation systems, particularly Windows XP, Orangeworm does not appear to be overly concerned about being discovered.

The 11-page report, available here<\/a>, includes significant technical details for security technologists to better understand the virus\u2019 execution and capabilities.
","saveContent":"Data security vendor Symantec is warning of a new and significantly dangerous hacker ring targeting large healthcare organizations in the United States, Europe and Asia.

\u201cSymantec has identified a previously unknown group called Orangeworm that has been observed installing a custom backdoor called Trojan.Kwempirs,\u201d the vendor notes.

Orangeworm is looking for targets to engage in corporate espionage in healthcare and other industries. Targets are chosen carefully and deliberately with extensive planning before an attack is made, Symantec experts contend.

Data from the security organization suggests that healthcare is the top target for the hackers\u2014it says that 39 percent of attacks have been aimed at healthcare organizations, with manufacturing, information technology, logistics and agriculture also in their crosshairs.

Also See:<\/b> Why patient confidence hinges on medical device security<\/a>

So far, Symantec has found Kwempirs malware placed on diagnostic imaging machines in healthcare organizations. Additionally, Orangeworm was observed to have an interest in machines used to assist patients in completing consent forms for required procedures.

The vendor acknowledges that exact motives of the Orangeworm group are unclear, but the company believes other industries have been targeted as part of a larger supply chain attack to enable Orangeworm to get access to healthcare organizations.

\u201cWhile these industries appear to be unrelated, we found them to have multiple links to healthcare, such as large manufacturers that produce medical imaging devices sold directly into healthcare firms, IT organizations that provide support services to medical clinics, and logistical organizations that deliver healthcare products.\u201d

The installed backdoor into an organization collects information from the infected computer, which Symantec surmises can help a hacker know if the computer is used by a researcher or a higher-value target. \u201cOnce Orangeworm determines that a potential victim is of interest, it proceeds to aggressively copy the backdoor across open network shares to infect other computers.\u201d

Further, with healthcare\u2019s reliance on older operation systems, particularly Windows XP, Orangeworm does not appear to be overly concerned about being discovered.

The 11-page report, available here<\/a>, includes significant technical details for security technologists to better understand the virus\u2019 execution and capabilities.
","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Hacker group targets imaging devices to breach healthcare providers

More for you