Get All Access for $5/mo

Amid Pandemic, Microsoft Alerts Dozens of Hospitals Vulnerable to Ransomware Threat Microsoft said it warned 'several dozens of hospitals' about vulnerabilities in their networks that could be used to deliver ransomware to their IT systems.

By Michael Kan Edited by Frances Dodds

This story originally appeared on PC Mag

Tayfun Coskun/Anadolu Agency/Getty Images via PC Mag

As doctors care for the sick during the coronavirus pandemic, Microsoft is trying to protect their hospitals from ransomware attacks.

On Wednesday, Microsoft said it warned "several dozens of hospitals" about software vulnerabilities in the online systems they use. The company is concerned hackers could end up exploiting the same flaws to deliver ransomware to hospital computers.

"To help these hospitals, many already inundated with patients, we sent out a first-of-its-kind targeted notification with important information about the vulnerabilities, how attackers can take advantage of them, and a strong recommendation to apply security updates that will protect them from exploits of these particular vulnerabilities and others," the company wrote in the blog post.

The vulnerabilities Microsoft is worried about deal with network devices, including gateways and VPN servers. Hospitals use these systems so that workers can securely log in and access the local healthcare network and applications.

Unfortunately, the same devices can contain vulnerabilities, making them attractive targets for hackers. One notorious group known as REvil has been doing just that by preying on flaws in vulnerable VPN servers to steal passwords, which can then be used to infiltrate an organization's IT infrastructure.

Not helping the matter is how many healthcare providers also use outdated software, such as Windows 7 and Windows XP. This can make them even more vulnerable to attack.

Microsoft didn't say how it learned which hospitals were susceptible to REvil's attacks. But the company has been tracking the group's activities, and fears hospitals will fall prey to them, which could put lives at stake in light of the ongoing pandemic. "Now more than ever, hospitals need protecting from attacks that can prevent access to critical systems, cause downtime, or steal sensitive information," the company added.

Ransomware is particularly problematic because the attacks can encrypt entire fleets of computers, effectively shutting them down. To free them, the victims have to pay a ransom, which in some cases can reach six figures or more.

Whether the affected hospitals heeded Microsoft's warnings remains unclear. But the company's blog post does contain tips on helping both hospitals and businesses protect themselves from potential ransomware attacks.

Some of Microsoft's employees are also part of a newly-announced coalition of 360 security researchers, who've banded together to protect hospitals from cyber attacks during the pandemic. According to Reuters, the group has already dismantled one campaign that was using a software vulnerability to distribute malicious computer code.

Michael Kan

Reporter

Michael has been a PCMag reporter since October 2017. He previously covered tech news in China from 2010 to 2015, before moving to San Francisco to write about cybersecurity.

Want to be an Entrepreneur Leadership Network contributor? Apply now to join.

Editor's Pick

Starting a Business

How to Find the Right Programmers: A Brief Guideline for Startup Founders

For startup founders under a plethora of challenges like timing, investors and changing market demand, it is extremely hard to hire programmers who can deliver.

Growing a Business

Why Your Company Needs to Rethink Its Purpose to Acquire Loyal Customers — And Drive More Sales.

The traditional path of finding a niche and competing on quality or price will no longer work. If you want true enduring and evangelical customer loyalty, deliver a product or service that connects with your customers on an emotional level.

Business Ideas

63 Small Business Ideas to Start in 2024

We put together a list of the best, most profitable small business ideas for entrepreneurs to pursue in 2024.

Marketing

This Unique Marketing Strategy Is Winning in 2024 — Here's Why (and How You Can Implement It Successfully)

Use this strategy to connect with customers, build trust and differentiate your business.