According to the Dutch National Cybersecurity Center, several hospitals from European countries supporting Ukraine have been targeted by pro-Russian threat actors, including their own UMCG hospital in Groningen. The cause behind UMCGs shutdown seems to be a DDoS attack, an operation that causes overload in a websites servers, making it impossible to handle the incoming traffic and consequently shutting it down. In an interview given to the Dutch website NU.nl, a spokesperson of the hospital declared that the DDoS attack is Coming in waves. Sometimes it stops for a while, and then it starts again. At the moment, it is quiet, but we do not know whether it will really stop now. The hospital said that its information system and patient portal have not been affected by the attack, as they rely on a different IT network. After being inaccessible for a few days, in a statement released on January 30, UMCG declared that its website is Largely available after an extra line of defense was added to their servers. According to the NCSC, the group said to be behind the attacks is Killnet. Since the start of the war in Ukraine, the hacking collective Killnet has gained notoriety for launching DDoS assaults against businesses and government institutions. Several Norwegian, British, Spanish, and U.S. hospitals are reportedly among Killnets targets. Last week, the threat actors announced their attacks on their Telegram channel, calling for action against the US government healthcare. In addition to DDoS attacks, the threat group is also known for engaging in phishing frauds. Most likely formed recently, in March 2022, Killnet gained notoriety pretty quickly. The group declared that its primary targets are Ukraine supporters, including NATO countries and allies of theirs. Killnets strikes against vital infrastructure have been foreshadowed by Western intelligence agencies in the past. The group is also said to be responsible for last weeks attacks on the websites of German airports, public administrations, and the financial sector. Killnet has also been linked to a DDoS attack on the European Parliaments website in November, an action which quickly followed after the Parliament passed a resolution calling Russia a State sponsor of terrorism. If you liked this article, follow us on LinkedIn, Twitter, Facebook, Youtube, and Instagram for more cybersecurity news and topics. If you liked this post, you will enjoy our newsletter. Get cybersecurity updates youll actually want to read directly in your inbox.
This Cyber News was published on heimdalsecurity.com. Publication date: Thu, 02 Feb 2023 10:18:03 +0000