Russian hacktivist group Phoenix targets India’s Health Ministry website: CloudSEK

Cyber security firm CloudSEK’s contextual AI digital risk platform XVigil late on Wednesday night said it had discovered a group of Russian threat actors, Phoenix, that claimed to have targeted an Indian government website.

The company said that after analyzing the data, it was concluded that the affected entity was the Health Management Information System belonging to the Indian Ministry of Health.

"The threat actor group mentioned in the post claiming to have access to all the hospitals of India and employees and chief physicians (at these hospitals)," CloudSEK said in its report reviewed by ET.


"The group mentioned the attack as a consequence of India’s agreement over the Oil Price cap and sanctions
of G-20 over the Russia-Ukraine war,"

Just days ago, India declared that it would not breach the Western sanctions on Russia, which includes a price cap of $60 imposed on oil from Moscow.

The Russian hactivist group Phoenix has shown a history of targeting entities like hospitals based in Japan and the United Kingdom, U.S. based healthcare organization serving the US military, a number of government departments in Pakistan including the Ministry of Health and a slew of other attacks.

In its report, CloudSEK classified Phoenix with a C3 rating as a threat actor where C refers to 'Fairly reliable' and 3 denotes being 'Possibly true.'