Hackers backed by the Russian state are trying to steal COVID-19 vaccine and treatment research from academic and pharmaceutical institutions around the world, Britain's National Cyber Security Centre (NCSC) said on Thursday.
A co-ordinated statement from Britain, the United States and Canada attributed the attacks to group APT29, also known as Cozy Bear, which they said was almost certainly operating as part of Russian intelligence services.
"We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic," said NCSC Director of Operations Paul Chichester.
Cybersecurity researchers said an APT29 hacking tool was used against clients located in United States, Japan, China and Africa over the last year.
Russian news agency RIA cited spokesman Dmitry Peskov as saying the Kremlin rejected London's allegations, which he said were not backed by proper evidence.
In a separate announcement Britain also accused "Russian actors" of trying to interfere in its 2019 election by trying to spread leaked documents online. Russia's foreign ministry said those accusations were "foggy and contradictory".
Britain is expected to publish a long-delayed report into Russian influence in British politics next week.
"SELFISH INTERESTS"
British foreign minister Dominic Raab said it was "completely unacceptable" for Russian intelligence services to target work on the pandemic.
"While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health," he said in a statement. He said Britain would work with allies to hold perpetrators to account.
The NCSC said the group's attacks were continuing and used a variety of tools and techniques, including spear-phishing and custom malware.
"APT29 is likely to continue to target organisations involved in COVID-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic," the NCSC statement said.
The U.S. Department of Homeland Security and U.S. Cyber Command also released technical information on Thursday about three hacking tools being deployed by the Russian hackers, codenamed WELLMAIL, SOREFANG and WELLMESS.
Private sector cybersecurity researchers who had spotted the WELLMESS malware over the last year were unaware of its Russian origins until Thursday.
In several cases, WELLMESS was found within U.S. pharmaceutical companies, said three investigators familiar with the matter, who spoke on condition of anonymity to discuss confidential information. The tool allowed the hackers to stealthily gain remote access to secure computers. They declined to name the victims.
Britain and the United States said in May that networks of hackers were targeting national and international organisations responding to the pandemic. But such attacks have not previously been explicitly connected to the Russian state.
Reuters
Fri Jul 17 2020
Cybersecurity researchers said an APT29 hacking tool was used against clients located in United States, Japan, China and Africa over the last year - Filepic
'Saya perlu dapatkan semula keyakinan diri' - Zii Jia
Lee Zii Jia mengakui perlu mendapatkan semula keyakinan diri selepas tewas kepada nombor satu dunia Viktor Axelsen semalam.
Selangor sasar noktah miskin tegar Julai ini - MB
Majlis Tindakan Pembangunan Negeri Selangor merekodkan sejumlah 861 keluarga masih berada dalam kategori miskin tegar.
Mesir-Perancis bincang gencatan senjata, bantuan kemanusiaan di Gaza
Mereka menekankan keperluan segera untuk gencatan senjata dan membincangkan beberapa inisiatif yang bertujuan menyelesaikan krisis tersebut.
Kitaro di Festival Muzik Hutan Hujan Dunia 2024
Kitaro bakal membuat persembahan pada Festival Muzik Hutan Hujan Dunia (RWMF) 2024 pada 28-30 Jun ini.
PH kerja keras pertahan DUN KKB, tidak mahu berasa selesa
Walaupun berjaya menguasai kerusi Dewan Undangan Negeri (DUN) Kuala Kubu Baharu (KKB) selama tiga penggal sejak 2013, namun ia bukanlah tiket untuk Pakatan Harapan (PH) berasa selesa.
MDKpr nafi curi haiwan ternakan dalam kandang
Ahmad Suqairy berkata haiwan itu ditangkap dalam operasi oleh Bahagian Penguatkuasaan MDKpr pada 23 Apr lalu di kawasan Kolej TAR.
488 acara dipertandingkan di SUKMA Sarawak 2024 - MSN
Jawatankuasa Tertinggi Sukan Malaysia (SUKMA) secara rasmi bersetuju menawarkan sejumlah 488 acara dipertandingkan pada temasya SUKMA Sarawak 2024.
Petronas Dagangan catat jualan lebih 16 bilion liter bahan api pada 2023
PDB merekodkan peningkatan perolehan sebanyak dua peratus didorong jumlah jualan lebih tinggi dan keuntungan selepas cukai yang meningkat.
Aset rizab rasmi Malaysia berjumlah AS$113.76 bilion pada akhir Mac - BNM
Aset rizab rasmi Malaysia berjumlah AS$113.76 bilion pada akhir Mac 2024 manakala aset mata wang asing lain adalah US$1.61 bilion, kata Bank Negara Malaysia (BNM).
Kemunculan Momota di gelanggang pastinya dirindui - Pemain badminton dunia
Momota bakal bersara daripada arena sukan badminton antarabangsa selepas Piala Thomas 2024 yang sedang berlangsung di Chengdu.