Safeguarding mobile health patients from the threat of ransomware

Jan Sysmans, Mobile App Security Evangelist, Appdome highlights that as one of the weaker links in the healthcare ecosystem, mobile health apps must be given the same amount of focus as the rest of the infrastructure so that professionals can seamlessly serve their clients’ needs

India’s healthcare ecosystem is witnessing a digital revolution, creating new, more convenient ways for doctors and professionals to treat people. The latest report from Research and Markets finds that the digital healthcare market is expected to shoot up from Rs 525 billion in 2021 to Rs 2,529 billion by 2027. One such innovation born from this increasing digitisation is mobile health apps, which connect doctors with patients in remote locations.

However, just like their human users, mobile apps need to stay healthy against all forms of “cyber diseases”, one of which is ransomware. With healthcare and digitisation increasingly intertwined, app makers need to create the proper safeguards so that our communities continue to benefit from effective care and treatment.

Impacts of ransomware attacks

What attracts cybercriminals to target health apps for ransomware is the huge volume of personal information that they typically handle. Once they have access, this information can then be sold on the dark web to other criminals looking to cheat or harm mobile users.

Besides personal information, mobile apps also contain a treasure trove of network data that communicates patients’ health status with the organisation. These include SSL certificates, API information, server addresses, usernames, and passwords. Threat actors can exploit this information to gain unauthorised access to data stored on the backend servers and install ransomware.

Besides denying patients control over their data, ransomware also curbs crucial and timely treatment, which can lead to avoidable deaths. Furthermore, failing to protect their patients against ransomware also risks the reputations of providers and puts them in the crosshairs of regulators, as user-owned data is non-consensually accessed by third parties.

Even when organisations do pay the ransom within the agreed-upon deadline, there is no guarantee that cybercriminals will release the data back to the user. Instead, they will either demand a larger sum or publish it on the dark web anyway, which violates users’ privacy rights. Either outcome is a lose-lose situation for healthcare organisations and will push clients to seek out alternatives that can safeguard their information more effectively.

As one of the weaker links in the healthcare ecosystem, mobile health apps must be given the same amount of focus as the rest of the infrastructure so that professionals can seamlessly serve their clients’ needs.

Guidelines for preventing ransomware infection

There are numerous methods that health and wellness organisations can rely on to block ransomware before it does significant damage to their apps. Many of these protections can be executed in 30 seconds or less, with or without coding.

• Many data regulations require app makers to encrypt their data to prevent exposure. It is recommended to employ AES-256, which is an advanced encryption protocol capable of protecting patient records regardless of where they are stored. These include memory drives, application sandboxes, and SD cards.
• Protection against debugging or tampering can disrupt the modification of mobile health apps, which reduces their vulnerability to ransomware infection.
• Complicating app coding prevents hackers from learning how the app works, making it harder for them to hold information hostage.
• Integrating jailbreak or root prevention solutions blocks hackers’ attempts to use compromised devices as a means of escalating privileges and gaining access to their most confidential information.
• Encrypt network traffic through tools like TLS/SSL certification validation, CA verification, and malicious proxy detection. This will prevent hackers from using lateral movements to install the ransomware.
• Using face or fingerprint identification software stops unauthorised users from utilising their systems.
• Automated attacks often use virtual devices, emulation, or legitimate programs like Android Debug Bridge (ADB) to impersonate real mobile users. Organisations can stop these tactics by integrating mobile fraud prevention solutions.
• Implementing safeguards against localised, on-device attacks can lower the risk of attackers directly harming the application or the user.
• Fake apps that share the name and likeness of the original not only ruin healthcare organisations’ reputations but also enable cybercriminals to gain insights into their clients and data. Luckily for app makers, it is possible to prevent resource repackaging by installing anti-reverse engineering solutions.

Mobile health apps are a lifeline for patients who are unable to travel to hospitals or simply need immediate self-care. It is crucial for app makers to keep their services protected from attackers looking to make a quick buck by holding their systems hostage. With a comprehensive mobile security solution, healthcare organisations can ensure that their patients continue to receive the best treatment possible without any interruptions.