HealthLeaders Media January 26, 2024
As organizations level up their technology, hackers are leveling up their tactics – with a new target.
The American Hospital Association released a statement about a social engineering scheme where hackers pose as IT help desk personnel to steal information from revenue cycle workers or those in “sensitive financial roles.”
According to AHA, the threat actors will call IT help desks and use the “stolen personally identifiable information” of an employee to answer security questions. Hackers will then request a password reset and enroll a device, like a cell phone, into multi-factor authentication.
The cell phone will typically have a local area code, allowing the hacker to bypass pre-existing multiple-factor authentication to access the email and applications of the employee...