Hackers Stole $7.5 Million in Grant Money From US Health Department

Hackers exfiltrated approximately $7.5 million in Department of Health and Human Services grant payments over a sustained campaign from late March to mid-November by compromising grantees' domain email accounts and using spearphishing to deceive payment staff; five accounts were targeted and the report gives impact and methods but no firm attribution.