\t\t\t\tThere have been eight victims in 2018 of the SamSam malware which has been targeting the healthcare sector. Victims have been reporting that their files are found encrypted with the extension .weapologize and receive a "Sorry" ransomware note in the form of ####-SORRY-FOR-FILES.html<\/p>\n\n\n\n\n
One of the victims is apparently Allscripts which in January announced it had been attacked on several of its applications including its Electronic Prescriptions for Controlled Substances services. Another victims has apparently been the city of Atlanta which suffered several days of bill payment and court access service disruptions. Other victims appear to be Hancock Health which has a regional hospital and more than 20 facilities. Hancock apparently paid four bitcoins ($55k at the time) to retrieve its encrypted(unusable) data.<\/p>\n\n\n\n\n
Some malware attacks are weapons which simply destroy data while masquerading as ransomware. NotPetya was just such a weapon which emulated the Petya ransomware virant.<\/p>\n\n\n\n\n
Some of the best methods to remediate the risks from ransomware have been to isolate sensitive data by only permitting its access via a virtual private network (VPN) in tandem with multi factor authentication (MFA.) Another method (and good practice) is to ensure the ability to quickly recovery from an attack which typically means having a good incident response procedure established with key persons and to have fresh and availably backups.<\/p>\n\n\n\n\n
<\/p>\n\n\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"
\t\t\t\t\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[64,65],"tags":[],"class_list":["post-7424","post","type-post","status-publish","format-standard","hentry","category-risks","category-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=7424"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7424\/revisions"}],"predecessor-version":[{"id":7827,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/7424\/revisions\/7827"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}