IT Firm Helps Healthcare Providers Fight Crypto Ransomware Amid Coronavirus

Published at: March 19, 2020

As the novel coronavirus crisis continues, a cybersecurity firm has started offering free help to healthcare providers that fall victim to cryptocurrency-demanding ransomware.

According to an announcement on March 18, cybersecurity firm Emsisoft partnered with incident response company Coveware to allow free access to ransomware-related services at no cost to healthcare providers.

The initiative aims to get the impacted organizations operational in the shortest time possible to reduce the impact on patient care to a minimum.

“A perfect storm”

According to the firm, ransomware attacks have a seasonal aspect with the number of incidents spiking during the spring and summer months.

Emsisoft also suggests that this year, the spike could be more pronounced than usual due to potential system vulnerabilities introduced by the hastily-introduced remote work environments and staffing shortages.

Brett Callow, an Emsisoft threat analyst told Cointelegraph that, in the vast majority of ransomware incidents, the attack vector is an email or an improperly secured remote access solution, adding:

“We’re anticipating an increase in ransomware incidents which could be significantly in excess of the typical seasonal spikes and, unfortunately, may coincide with COVID-19’s peak. A perfect storm.”

At the end of last year, Emsisoft released a report claiming that in 2019, at least 764 healthcare providers were impacted by ransomware. Now, the firm suggests that with the ongoing pandemic such attacks “could tip the balance and result in a significant loss of life.”

Chart of ransomware cases reported per month. Source: Emsisoft

Since the stakes are higher than usual, the firms will offer technical analysis of ransomware and decryption tool development for free. As a last resort, the free services also include ransom negotiation, transaction handling and post-ransom payment data recovery management with a custom decryption tool.

Ransowmare’s relationship with Bitcoin

Ransomware is a growing risk in an economy that is becoming ever-more dependent on technology for providing goods and services. In a recent meeting, the United States Senate examined new measures to enhance the homeland security cybersecurity measures, including addressing ransomware.

Recently, a group of particularly opportunistic hackers started spreading ransomware by claiming that the software they are sending provides information on the spread of the coronavirus.

Tags
Technology
Cryptocurrencies
Coronavirus
Cybersecurity
Ransomware
Related Posts
Bitcoin Ransomware and Remote Working: What the Future Holds
The new work-from-home culture is gaining more traction than ever before as businesses, government departments and schools try to remain afloat while flattening the pandemic curve. This migration to remote working is a double-edged sword that creates a fertile land for cybercriminals to thrive on. There is no way that cyberattacks can be eliminated completely. The best that companies can do is minimize the frequency of the threats. What is ransomware? Cybercriminals use malicious software code to block people or organizations from accessing their computer systems until a ransom has been paid. Cryptocurrencies such as Bitcoin (BTC) have made it …
Technology / Aug. 21, 2020
Don’t blame crypto for ransomware
Recently, gas has been a hot topic in the news. In the crypto media, it’s been about Ethereum miner’s fees. In the mainstream media, it’s been about good old-fashioned gasoline, including a short-term lack thereof along the East Coast, thanks to an alleged DarkSide ransomware attack on the Colonial Pipeline system, which provides 45% of the East Coast’s supply of diesel, gasoline and jet fuel. In cases of ransomware, we generally see a typical cycle repeat: Initially, the focus is on the attack, the root cause, the fallout and steps organizations can take to avoid attacks in the future. Then, …
Technology / May 30, 2021
Major Chilean bank shuts down all branches following ransomware attack
Banco Estado, the only public bank in Chile and one of the three largest in the country, had to shut down its nationwide operations on Monday due to a cyberattack that turned out to be a ransomware launched by REvil. According to a public statement, the branches will remain closed for at least one day, but clarified that customers’ funds have not been affected by the incident. Citing sources close to the investigation, ZDNet reported that the REvil ransomware gang is behind the attack. It reportedly originated from an Office document infected with the malware that an employee received and …
Technology / Sept. 8, 2020
Aviation Database Struck By Unknown Ransomware Gang
Smartwatch maker and data-syncing service provider, Garmin, was the subject of a ransomware attack that took down several of its services on July 23, which managed to encrypt its internal network. According to a series of tweets published by the company, the Garmin Connect website and mobile app were affected by the hackers, plus the call centers and every customer support resources like replying emails, online chats, and handling calls. However, the nature of the attack was unveiled by ZDNet, who also stated that the cybercriminals also targeted flyGarmin, the company’s service that supports its line of aviation navigational equipment. …
Technology / July 25, 2020
Using Ransomware, Hackers Steal and Publish Medical Data of Firm Researching Coronavirus
Black hat hacker group Maze has infected the infrastructure of a firm researching the coronavirus with ransomware, managing to steal and publish sensitive data. The hack of medical information Cybersecurity firm Emsisoft told Cointelegraph on March 23 that Maze group’s hackers compromised United Kingdom medical firm Hammersmith Medicines Research. The published data includes sensitive data on medical test volunteers such as id documents like passports, medical background and details of the tests. Emsisoft threat analyst Brett Callow said: “[The data] is on the clear web where it can be accessed by anybody with an internet connection. [...] The criminals almost …
Bitcoin / March 23, 2020