Make a surprised face: Built-in malware has been discovered in medical devices manufactured in China and also marketed in Israel.
The US Cybersecurity and Infrastructure Security Agency (CISA) announces that Contec CMS8000 devices, used to monitor patient indicators and manufactured by the Chinese company Contec, contain built-in malware.
The malware was initially discovered following a report by an ABTM researcher, and after an examination of three devices by CISA, it was discovered that the device sends information to an IP address defined in the code and associated with a university in China.
Furthermore, the agency discovered that the backdoor allows the background download of a malicious file that allows complete remote control of the device and that patient information is transferred from the device to the same Chinese IP address.