A new ransomware strain, called NailaoLocker, is targeting European healthcare organizations. Detected by Orange Cyberdefense, the Green Nailao campaign exploits vulnerabilities in Check Point VPN appliances, uses backdoors like ShadowPad and PlugX to infiltrate networks, and combines ransomware with cyberespionage tools, posing a significant threat to data security and operational continuity. Analysts suggest the attackers could be linked to Chinese cyberespionage groups and urge quick patching of vulnerabilities.

Green Nailao cyber threat targets European healthcare with advanced tactics, undocumented ransomware
Cybersecurity firm Orange CyberDefense has identified a threat group called Green Nailao, which targeted European health organisations from June to October. The group deployed a