Hospital IT Help Desks Hit With Social Engineering Attacks

A new security advisory from the U.S. government highlights sophisticated social engineering tactics used by threat actors in recent financially motivated attacks against the healthcare sector. The attackers impersonated healthcare organization employees in phone calls to IT help desks, in order to gain initial access to those employees' email accounts.

As outlined in a new industry alert from the Department of Health and Human Services’ (HHS) Health Sector Cybersecurity Coordination Center, the phone calls to IT help desks would claim …

access accounts advisory attackers attacks email employees engineering government healthcare help desks hospital initial access order organization phone phone calls sector security security advisory social social engineering social engineering attacks social engineering tactics tactics threat threat actors u.s. government