Cybercriminals, identified as TA2900, are executing sophisticated business email compromises targeting tenants, mainly in France and Canada. They manipulate victims into redirecting rent payments by sending official-looking messages claiming banking details have changed. Exploiting urgency and emotional responses, these attackers utilize compromised mailboxes from educational institutions to enhance credibility. Their primary goal is financial theft.

Implementing this privileged access model is challenging, but worth the effort
Healthcare organizations should enhance defenses against ransomware by implementing a secure-by-design model, according to experts like Erik Decker of Intermountain Health. This approach requires strong