
Stealthy Backdoor Publicly Available on GitHub Can Be Weaponized for Larger Attacks
Excerpt from November 13, 2024 article in Healthcare Infosecurity
While the Health-Information Sharing and Analysis Center has seen an increase in recent reports of ransomware and malware incidents impacting the global healthcare sector, it has had “no direct sightings” of Godzilla webshell so far, said Errol Weiss, chief security officer of Health-ISAC.
Nonetheless, Weiss said he’s glad HHS issued the warning about Godzilla. “I would encourage all organizations, no matter what sector they’re in, to follow the recommendations in the bulletin,” he said.
Health-ISAC’s Weiss recommends that healthcare organizations review and implement the voluntary Cybersecurity Performance Goals published by HHS in January (see HHS Details New Cyber Performance Goals for Health Sector).
“Implementing the CPGs and participating in an information sharing community would help greatly improve the security posture of an organization.”
Read the full story in Healthcare Infosecurity here.
- Related Resources & News
- Healthcare Heartbeat 2024 Q4
- Health-ISAC Hacking Healthcare 2-19-2025
- Podcast: Reflecting on the Change Healthcare cyberattack
- Senate Confirms Trump Pick RFK Jr. to Lead HHS
- The Alarming Backdoor Hiding in 2 Chinese Patient Monitors
- Health-ISAC 2025 Health Sector Cyber Threat Landscape
- How Health Systems Manage Security in the Cloud
- Change Healthcare Attack a Wake-up Call for the Industry
- Five High-Impact Cyberattacks Healthcare Industry Should Avoid in 2025
- Health-ISAC Hacking Healthcare 2-11-2025