At least 100 healthcare entities and companies in the healthcare supply chain have been hit since January 2015. The Orangeworm campaign is notable for the potential it has to execute extensive damage to high-value x-ray machines, MRI systems, and other medical devices as well as their network infrastructure. The group is conducting operations to learn about the technologies running on many of the compromised devices, says Symantec’s Jon DiMaggio. The attackers have used the backdoor to collect basic system and network information to determine if a compromised system or network is high value.”]