Ransomware infects Hancock Health hospital

Posted date 30/01/2018

On January 11, Hancock Health hospital in Indiana, United States, was infected with the SamSam ransomware, despite having backup the CEO decided to pay the ransom that amounted to 55,000 dollars, arguing that paying the ransom would be less traumatic for the hospital's operation than restoring the backup that could take days or even weeks.

This malware has as main objective American public institutions, being its attack vector the insecure RDP connections. Once it infects the system, it encrypts the files and requests the rescue in Bitcoin. This campaign began at the end of last year and has raised more than $ 300,000.

References