A security researcher on Monday said the recent ransomware attacks on hospital chains in Florida and Texas are tied to the Conti ransomware gang.
Jamie Hart, cyber threat intelligence analyst at Digital Shadows, confirmed that Leon Medical Centers and Nocona General Hospital were both found on the Conti ransomware data leak site. Leon Medical was posted on December 21, 2020, and Nocona on February 3, 2021.
Hart said the Conti gang reportedly sent malicious phishing emails to Leon Medical in September 2020 and used a Microsoft Server Message Block vulnerability (CVE-2020-0796) to access an admin account. From there, the attackers used the well-known tools BloodHound and Mimikatz to dive deeper into victim networks. The researcher added that the Conti operators updated the post for Leon Medical earlier today and the Nocona General Hospital post on Feb. 3, exposing m ..
Support the originator by clicking the read the rest link below.
