Security researchers identified a new ransomware strain actively targeting US healthcare providers through phishing emails.

The malware encrypts both primary data and backups, making recovery particularly challenging without paying the ransom.

Providers are urged to audit backup isolation and verify incident response playbooks immediately.