HHS, FBI warn healthcare sector of social engineering scheme

Health IT Security July 1, 2024
Jill McKeon

Threat actors have been using phishing schemes to steal login credentials and divert automated clearinghouse payments, HHS and the FBI warned in a joint cybersecurity advisory.

HHS and the Federal Bureau of Investigation (FBI) released a joint cybersecurity advisory (CSA) to disseminate indicators of compromise related to a social engineering campaign targeting healthcare and public health entities.

Specifically, the CSA warned that threat actors have been using phishing schemes to steal login credentials for initial access and divert automated clearinghouse (ACH) payments to US-controlled bank accounts.

In this scheme, threat actors often call an organization’s IT help desk and impersonate employees to trigger a password reset for the targeted employee’s account. The American Hospital Association (AHA) issued alerts in January...

Today's Sponsors

Today's Sponsor