A highly sophisticated malware campaign has been targeting multiple industries, including the healthcare and public health sectors, for the past year, according to a May 2 alert from the U.S. Department of Homeland Security’s National Cybersecurity and Communications Integration Center.
The threat actors use stolen administrative credentials and certificates to install refined malware implants on critical systems, officials said. IT service providers are part of the campaign’s victims, where these hacks can be leveraged to access client networks.
