According to a recent Symantec study, Trojan.Gatak recently began targeting healthcare organizations in particular. Gatak poses as a website offering product license keys for users of pirated software. Gatak bundles its malware with the product key so that when the victim downloads and opens one of these files, expecting a product key, malware is installed on their computer instead.

Symantec found that Gatak is targeting healthcare organizations. Of the top 20 most affected organizations, 40% were in the healthcare industry whereas no more than 5% of any other industries were affected. Symantec believes Gatak may be targeting the healthcare sector because healthcare records typically sell for more than other personal information. Plus, healthcare organizations may be using legacy systems that are expensive to upgrade.