ALPHV is singling out healthcare sector, say FBI and CISA

CISA, FBI and HHS warn that the ALPHV/BlackCat ransomware group and affiliates have increasingly targeted the healthcare sector since mid-December 2023 (about 70 leaked victims), using social engineering, credential theft, and remote-access tools (AnyDesk, MegaSync, Splashtop) to exfiltrate data and deploy ransomware that can encrypt Windows, Linux, and VMware; the advisory and report note other groups (e.g., Rhysida), highlight substantial operational impact to healthcare, and provide mitigation guidance such as patching, EDR/MDR, segmentation, offline backups, and ransomware rollback capabilities.