Daixin Ransomware Team

 

Ransomware does not slow down. Bad guys saw the gain in this attack technique and they are highly motivated to carry on this attack.

A ransomware warning against the Daixin Team for healthcare sector came from CISA (Cybersecurity and Infrastructure Security Agency), FBI and HHS (Health and Human Services) in USA.

Daixin Team attackers have been linked to multiple health sector ransomware incidents since (at least) June 2022.

"U.S. health organizations are advised to take the following measures to defend against Daixin Team's attacks:

- Install updates for operating systems, software, and firmware as soon as they are released.

- Enable phishing-resistant MFA for as many services as possible.

- Train employees to recognize and report phishing attempts."

https://www.bleepingcomputer.com/news/security/us-govt-warns-of-daixin-team-targeting-health-orgs-with-ransomware/

"'The Daixin Team is a ransomware and data extortion group that has targeted the HPH Sector with ransomware and data extortion operations since at least June 2022,' the advisory revealed.

Since June, Daixin Team attackers have been linked to multiple health sector ransomware incidents where they've encrypted systems used for many healthcare services, including electronic health records storage, diagnostics, imaging services, and intranet services."

"The ransomware gang gains access to targets' networks by exploiting known vulnerabilities in the organizations' VPN servers or with the help of compromised VPN credentials belonging to accounts with multi-factor authentication (MFA) toggled off."

A Hospital In Texas Facing Ransomware

 

Ransomware attacks against hospitals keep increasing. The victim is from Texas - USA this time.

A ransomware attack against a medical center caused some communication issues and also disruptions.

It is scary that the hospitals are facing ransomware attacks.

https://www.scmagazine.com/analysis/ransomware/texas-hospital-facing-communication-issues-system-rebuild-amid-ransomware-attack

"A ransomware attack deployed against OakBend Medical Center on Sept. 1 caused communication issues and IT disruptions..."

"The hospital turned over the ransomware investigation to 'a team consisting of the FBI, CYD, and the Ft. Bend County Government Cyberteam.'"

"The update released on Sept. 9 shows that OakBend is still working to bring its clinical systems back online “in a controlled, systemic environment” and is facing continued telephone and email issues..."

"A report from DataBreaches.net shows the Daixin ransomware group is claiming responsibility for the attack."

"The incident at OakBend joins an estimated 55 other ransomware attacks deployed against U.S. healthcare entities this year, according to RedSense Intelligence Operations estimates. Several lawmakers recently requested an urgent meeting to determine how the health sector is fighting off the threat of ransomware and what help is needed to support defense."

"Currently, a French hospital and the U.K. National Health Service are facing similar outages..."