Espionage in hospitals: China and North Korea against American medicine

CarderPlanet

Professional
Messages
2,557
Reputation
7
Reaction score
550
Points
83
In the United States, they became concerned about the capabilities of government hackers from hostile countries.

U.S. federal authorities are warning that Chinese and North Korean cybercrime groups continue to pose a serious threat to the U.S. health and public health sector through their espionage and intellectual property theft campaigns.

The main threat actors identified by the agency are the following groups:
  • APT41 (Double Dragon, Wicked Panda), supported by the Chinese government;
  • Lazarus, supported by North Korea;
  • APT43 (Kimsuky, Velvet Chollima, Emerald Sleet, Thallium);

The Ministry of Health and Human Services ' Health Sector Cybersecurity Coordination Center (HHS HC3) said China and North Korea are significant cyber powers. Both countries ' domestic policies have created a unique cybercrime ecosystem, where the only significant cybercriminals threatening the U.S. healthcare sector are government hackers.

The representative of the Center for Information Exchange and Analysis of Health Data also stressed that APT41, APT43 and Lazarus carry the main cyber threats to the health sector.

It is worth noting that last week at the mWISE conference in Washington, US FBI Director Chris Uray said that China's cyber espionage program is so extensive that it surpasses all similar programs of other major countries combined . It is noted that threats from North Korean government hacking groups also raise serious concerns for the US health and national security sector.

HHS HC3 has made a number of recommendations for improving threat protection, which include regularly backing up data and ensuring that copies of critical data are not available for modification or deletion.

The US isn't the only country targeted by Chinese hackers. Earlier, specialists of the Unit 42 division of the information security company Palo Alto Networks reported that the unnamed government of Southeast Asia was the target of several Chinese hacker groups that conducted espionage campaigns in the region for a long time.

It should also be noted that almost a decade after the leaked documents of Edward Snowden revealed that the US NSA hacked the servers of the Chinese telecommunications giant Huawei, Beijing officially recognized this attack. According to the Chinese agency, the NSA, through its Office of Tailored Access Operations (TAO), "systematically conducted attacks" on China in an attempt to steal important data.
 
Top