From Cryptojacking to Tabnabbing - about Healthcare Cyber Attacks

Cyberattacks come in many different forms, and a robust cybersecurity structure will account for all types.

Cyberattack - A cyberattack is when a hacker attempts to access a computer network to damage or manipulate the network or steal information.

Phishing - Phishing is an attempt to get targets to reveal valuable information such as login IDs and passwords, credit card numbers, or social security numbers, usually via a spoofed email claiming to be from a reputable organization. 

Pharming - Pharming seeks to gain personal information by using malicious code to redirect web traffic to fraudulent websites that impersonate valid websites.

Spoofing - Spoofing makes communication from malicious sources appear to originate from a legitimate source. Spoofing is often a component of a larger cyberattack. 

Ransomware - Ransomware is malware installed on a computer that blocks access to the computer unless a ransom is paid.

Cyber extortion - In cyber extortion, hackers threaten targets with the release of confidential or compromising information unless a ransom is paid.

Malware - Malware is malicious software that allows hackers to damage or manipulate a computer network.

Dark web / Deep web - The dark web is a section of the internet that is only accessible with specialized software known as Tor (The Onion Router), allowing users to operate and post anonymously. 

Cryptojacking - Cryptojacking uses malware to redirect a computer’s resources to mine online currencies for the hacker, usually unbeknownst to the target.

Tabnabbing - Hackers use tabnabbing to manipulate inactive browser tabs and impersonate legitimate websites.

Cybersquatting / typosquatting - Cybersquatting is the practice of disregarding trademarks and registering or using a domain name with the intent to capitalize on the intent of the site visitor.

Distributed Denial of Service (DDoS) - A DDoS is an attack that disrupts or blocks web traffic on a targeted network.

Common Types of Healthcare Cyberattacks

These are some of the most common healthcare cyberattack types that individuals and organizations face in the industry:

1. Employee Access

Perhaps the most overlooked kinds of healthcare cyberattacks are those that are due to employees accessing a network or system, whether intentionally or unintentionally. Sometimes, it can be a disgruntled employee, but most instances in which disclosures occur are simply by mistake.

Such attacks occur as a result of a failure to have the appropriate encryption tools, methods, or processes in place to ensure that employees are trained and organizations conduct their business in a cybersecurity-aware way. Investing in continuous education, protection, and oversight is key to guaranteeing the security of your systems.

2. Phishing

There are multiple variations in phishing. Probably the most concerning is the one that allows hackers to gain access to your information very quickly, whether after sending an email to a corporate account or after you allow third-party access.

Let’s consider a practical example. Imagine that you’re a nurse working late in the evening. You just happen to go and check your personal Gmail account from a hovered entities asset. You open up that link, and, all of a sudden, your data has been exposed. That’s just how quickly phishing attacks work.

3. Internet-of-Things (IoT) Devices

The Internet of Things or IoT is another common threat. In healthcare environments, an increasing number of various medical devices are becoming wireless and exposed to cyberattacks, viruses, and other threats. 

But it doesn’t even have to be a medical device. Consider security cameras, for instance. They are often installed and left with maybe a non-specific domain-controlled username and password. All security cameras come with an administrator password such as “1, 2, 3” as their default, and the failure to modify that and control access to those devices can lead to disclosure.

Fortinet recently announced that they had a huge issue with known usernames and passwords being disclosed. It’s easy for a hacker to exploit vulnerabilities in the system and gain access through old usernames and passwords. There have been many known breaches in regards to that. 

How to Enhance Your Organization’s Cybersecurity Protection 

One way to do this that not many people take seriously is to establish a protocol for when an employee leaves your organization. Some people call this IT hygiene.

You may be quick to take an ex-employee off payroll, but you should also take the time to look into what type of system access and control that person had. Then, make sure to remove that access, diminish, and protect it. These steps should be incorporated into your organization’s standard workflow and process.

Another thing you should consider doing is partnering with cybersecurity experts like ThinkSecureNet. Improving your organization’s cybersecurity protection should be an ongoing endeavor as online threats change daily. That makes it nearly impossible for non-specialists to keep up and modify their protection accordingly.

Luckily, a trusted partner such as ThinkSecureNet can help you navigate cybersecurity threats with confidence and develop a solid recovery plan in the event of a breach.