FBI and HHS release joint cybersecurity advisory on social engineering threats affecting healthcare sector

The FBI and the Department of Health and Human Services have issued a joint advisory following a social engineering campaign targeting healthcare organisations. The campaign uses phishing schemes to steal login details and divert payments to US bank accounts, often by impersonating employees. The advisory urges organisations to implement multi-factor authentication, train IT helpdesk employees on the vulnerability and conduct regular audits of remote access tools.