Russian hackers linked to the Kremlin have targeted coronavirus vaccine research facilities in the US, the UK, and Canada, according to security officials

Advertisement
Russian hackers linked to the Kremlin have targeted coronavirus vaccine research facilities in the US, the UK, and Canada, according to security officials
Reuters
  • Kremlin-linked Russian hackers have launched cyberattacks to try to steal research from organizations developing coronavirus vaccines, UK security officials said on Thursday.
  • The allegations were released in coordination with the US's and Canada's security agencies.
  • The hacking group — known as APT29, Cozy Bear, or the Dukes — has previously been linked to various cyberattacks, including the hacking of the Democratic National Committee before the 2016 US presidential election.
Advertisement

Russian hackers who are "almost certainly" working for the country's intelligence services have targeted coronavirus vaccine research facilities in the US, the UK, and Canada, the UK government said on Thursday.

UK security officials told journalists that the group — known as APT29, Cozy Bear, or the Dukes — had launched "persistent, highly targeted and ongoing" cyberattacks on organizations developing coronavirus vaccines as part of a "malicious" attempt to steal their research.

The allegations, released in coordination with the United States' and Canada's security services, suggested that the group had been making the hacking attempts since the start of the pandemic in February.

"We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic," said Paul Chichester, the director of operations for the UK's National Cyber Security Centre.

"Working with our allies, the NCSC is committed to protecting our most critical assets and our top priority at this time is to protect the health sector."

Advertisement

The National Cyber Security Centre said the group used techniques "including spear-phishing and custom malware known as 'WellMess' and 'WellMail.'"

"It is completely unacceptable that the Russian Intelligence Services are targeting those working to combat the coronavirus pandemic," Dominic Raab, the UK's foreign secretary, said in a statement.

"While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health.

"The UK will continue to counter those conducting such cyber attacks, and work with our allies to hold perpetrators to account."

The group was previously accused of hacking the Democratic National Committee in 2016, which led to the leaks of Hillary Clinton's private emails before the US presidential election.

Advertisement

The group has also been linked to cyberattacks targeting the Pentagon, the Norwegian government, the Dutch government, and multiple think tanks and nongovernmental organizations.

These new allegations are the first time that UK officials have explicitly linked the group to Russian intelligence, though such links have long been suspected.

Officials said the UK had a range of tools at its disposal to fend off cyberattacks from malicious actors.

{{}}