H-ISAC TLP Green Threat Bulletin: Zeon Threat Group Impersonating Healthcare Patient Data Software Solutions

On October 20, Advanced Intelligence confirmed that the group began contacting employees of target organizations and achieved unauthorized access via the Zoho remote access tool.

Zeon is a threat group previously observed impersonating legitimate healthcare organizations delivering software solutions focused on patient data. The first wave identified impersonating legitimate healthcare software occurred in late September.