The FBI, Cybersecurity and Infrastructure Security Agency, and Department of Health and Human Services have updated Alert AA20-302A: Ransomware Activity Targeting the Healthcare and Public Health Sector to include the latest cybercriminal threat information facing U.S. hospitals.
The Nov. 1 advisory covers information on Conti, TrickBot, and BazarLoader, including indicators of compromise and Yara rules for detection. The advisory also describes the tactics, techniques, and procedures used by cybercriminals against targets in the health care and public health sector to infect systems with Ryuk ransomware for financial gain.