Microsoft, Health-ISAC announce disruption to cybercriminal businesses supplying attacks on healthcare, others 

Microsoft and Health-ISAC Oct. 15 announced that they disrupted three cybercriminal businesses that provided services to threat actors to attack more than 75,000 organizations worldwide, including healthcare. The businesses were found to be part of a wider, Chinese-language cybercriminal marketplace supplying malicious services to threat actors around the world. Investigators that included Microsoft, Health-ISAC, Japan’s National Police Agency and other organizations collaborated to seize and redirect domains for infrastructure operating the three criminal businesses — YAM Store, CoGUI and Iron Man. The businesses collectively enabled more than 1 billion malicious messages that targeted consumers, healthcare organizations, financial institutions and other entities in more than 150 countries, generating tens of millions of dollars. 

For more information on this or other cyber and risk issues, contact John Riggi, AHA national advisor for cybersecurity and risk, at jriggi@aha.org, or Scott Gee, AHA deputy national advisor for cybersecurity and risk, at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.