[{"innerBlocks":[],"name":"core\/freeform","postId":2417,"blockType":{"name":"core\/freeform","keywords":[],"attributes":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"providesContext":[],"usesContext":[],"selectors":[],"supports":{"className":false,"customClassName":false,"reusable":false},"styles":[],"variations":[],"apiVersion":3,"title":"Classic","description":"Use the classic WordPress editor.","category":"text"},"originalContent":"Norton Security describes bots as Internet robots, also called spiders, crawlers and web bots.

Healthcare organizations are beginning to look to bots to perform automated tasks, such as indexing a search engine.

However, these automated applications also can be used maliciously as malware and gain total control of a computer or information systems.

After a bot is in an environment, it can access insurance accounts, provider organization accounts, patient portal accounts and vendor accounts, says Reid Tatoris, vice president of product outreach at Distil Networks, a cybersecurity company specializing in bot detection and mitigation.

A hacker can use a bot to access accounts and find test results; financial information such as bills; payments made through debit, credit or health savings accounts; and patients\u2019 Social Security numbers, he says.

That information can include more than just basic health information, he adds. A bot may cull insurer information from a patient, for example, and find whether a patient has a mortgage, doctors that the patient has seen, personal health information, medications and the pharmacies that a patient uses. It\u2019s a perfect recipe for identity theft, Tatoris contends.

\u201cIf a patient has a prescription for opioids, the hacker can see that, grab the prescription, go to the patient\u2019s pharmacy, state the patient\u2019s name and address, and walk out with the opioids,\u201d says Tatoris. \u201cAnyone with PHI online is a target.\u201d

Also See:<\/b> Partners Healthcare notifies 2,600 patients after malware attack<\/a>

Ten years ago, hackers were setting up bots in Russia, but neither the bots nor the perpetrators were sophisticated, Tatoris explains. Today, bots are attacking medical devices and using individuals\u2019 own computers to attack other victims. And it\u2019s difficult to block a bot because the location of the bot can change every day.

Fortunately, there are some steps that can make a hacker\u2019s task more difficult, such as having multiple strong passwords. If an individual uses the same password for accessing insurance information and accessing an account at a Target store, those are now known sites to a hacker, who can use the password to find more sites.

Healthcare organizations routinely monitor web traffic coming into a facility, but they may not be monitoring certain metrics, according to Tatoris. Questions to consider include \u201cHow frequently are we seeing this user?\u201d \u201cHow often is the user moving the mouse?\u201d \u201cIs the user acting like most other users would act, or is the user working very fast in a robotic mode and not acting as a human would act?\u201d

Tatoris contends that providers really should not try fighting the bot war on their own. \u201cThere\u2019s no way for a provider to do this; you are not an expert at bots,\u201d he adds. \u201cIt\u2019s an arms race, and if you see bots on your site, it turns into a game of whack-a-mole,\u201d indicating that it\u2019s difficult to keep up with an automated application that disappears and then reappears somewhere else in a system.
","saveContent":"Norton Security describes bots as Internet robots, also called spiders, crawlers and web bots.

Healthcare organizations are beginning to look to bots to perform automated tasks, such as indexing a search engine.

However, these automated applications also can be used maliciously as malware and gain total control of a computer or information systems.

After a bot is in an environment, it can access insurance accounts, provider organization accounts, patient portal accounts and vendor accounts, says Reid Tatoris, vice president of product outreach at Distil Networks, a cybersecurity company specializing in bot detection and mitigation.

A hacker can use a bot to access accounts and find test results; financial information such as bills; payments made through debit, credit or health savings accounts; and patients\u2019 Social Security numbers, he says.

That information can include more than just basic health information, he adds. A bot may cull insurer information from a patient, for example, and find whether a patient has a mortgage, doctors that the patient has seen, personal health information, medications and the pharmacies that a patient uses. It\u2019s a perfect recipe for identity theft, Tatoris contends.

\u201cIf a patient has a prescription for opioids, the hacker can see that, grab the prescription, go to the patient\u2019s pharmacy, state the patient\u2019s name and address, and walk out with the opioids,\u201d says Tatoris. \u201cAnyone with PHI online is a target.\u201d

Also See:<\/b> Partners Healthcare notifies 2,600 patients after malware attack<\/a>

Ten years ago, hackers were setting up bots in Russia, but neither the bots nor the perpetrators were sophisticated, Tatoris explains. Today, bots are attacking medical devices and using individuals\u2019 own computers to attack other victims. And it\u2019s difficult to block a bot because the location of the bot can change every day.

Fortunately, there are some steps that can make a hacker\u2019s task more difficult, such as having multiple strong passwords. If an individual uses the same password for accessing insurance information and accessing an account at a Target store, those are now known sites to a hacker, who can use the password to find more sites.

Healthcare organizations routinely monitor web traffic coming into a facility, but they may not be monitoring certain metrics, according to Tatoris. Questions to consider include \u201cHow frequently are we seeing this user?\u201d \u201cHow often is the user moving the mouse?\u201d \u201cIs the user acting like most other users would act, or is the user working very fast in a robotic mode and not acting as a human would act?\u201d

Tatoris contends that providers really should not try fighting the bot war on their own. \u201cThere\u2019s no way for a provider to do this; you are not an expert at bots,\u201d he adds. \u201cIt\u2019s an arms race, and if you see bots on your site, it turns into a game of whack-a-mole,\u201d indicating that it\u2019s difficult to keep up with an automated application that disappears and then reappears somewhere else in a system.
","order":0,"get_parent":{},"attributes":[],"attributesType":{"content":{"type":"string","source":"raw"},"lock":{"type":"object"}},"dynamicContent":""}]

Why bots pose an increasing challenge to healthcare organizations

More for you