SC Media May 6, 2022
Data from the Department of Health and Human Services Cybersecurity Program shows the rate of initial access brokers selling access to healthcare networks to ransomware groups and affiliates has remained constant from the end of 2021 through the first half of the year.
The new HC3 report on ransomware trends for 2022 so far confirms the sale of access to global healthcare entities on dark web forums has also remained consistent during the assessed time period. The concern is that the brokers are further enabling ransomware-as-a-service groups to focus more on the development of payloads and coordinate operations with affiliates.
In total, VPN and RDP access accounted for more than half of these forum advertisements, followed by compromised Citrix VPN...