UnitedHealth: Compromised Citrix Credentials Behind Change Healthcare Hack

Published on April 30, 2024

In testimony slated to be delivered before a U.S. House committee, UnitedHealth Group CEO Andrew Witty says that hackers used stolen credentials to log in to a Citrix remote access portal, using an account that didn’t have multifactor authentication enabled.

Continue reading on website
Other news

Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

April 30, 2024
Cybersecurity researchers have discovered multiple campaigns targeting Docker Hub by planting millions of malicious "imageless" containers over the past five years, once again underscoring how open-source registries could pave the way for supply chain attacks."Over four million of the repositories in Docker Hub are imageless and have no content except for the repository

Change Healthcare hacked using stolen Citrix account with no MFA

April 30, 2024
UnitedHealth confirms that Change Healthcare's network was breached by the BlackCat ransomware gang, who used stolen credentials to log into the company's Citrix remote access service, which did not have multi-factor authentication enabled. [...]