Cybercrime groups that are tied to high-profile hacking operations are stepping up social-engineering attacks against the healthcare sector, according to a report from Healthcare Dive. The recent attacks have centered on voice-phishing, a technique in which attackers use phone calls to pose as trusted parties and pressure employees into providing sensitive information.
In these incidents, the goal is typically to obtain worker credentials, which can then be used to breach hospital systems or access patient data. Unlike many malware-based intrusions, the attacks exploit human trust rather than software vulnerabilities, making them difficult to block with traditional security tools alone.
Because the article draws on a single report, there are no conflicting sources to compare. Still, the development underscores the need for healthcare organizations to reinforce employee training around suspicious calls and to adopt verification procedures for credential requests.