Hackers backed by the Russian state are trying to steal COVID-19 vaccine and treatment research from academic and pharmaceutical institutions around the world, Britain's National Cyber Security Centre (NCSC) said on Thursday.
A co-ordinated statement from Britain, the United States and Canada attributed the attacks to group APT29, also known as Cozy Bear, which they said was almost certainly operating as part of Russian intelligence services.
"We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic," said NCSC Director of Operations Paul Chichester.
Cybersecurity researchers said an APT29 hacking tool was used against clients located in United States, Japan, China and Africa over the last year.
Russian news agency RIA cited spokesman Dmitry Peskov as saying the Kremlin rejected London's allegations, which he said were not backed by proper evidence.
In a separate announcement Britain also accused "Russian actors" of trying to interfere in its 2019 election by trying to spread leaked documents online. Russia's foreign ministry said those accusations were "foggy and contradictory".
Britain is expected to publish a long-delayed report into Russian influence in British politics next week.
"SELFISH INTERESTS"
British foreign minister Dominic Raab said it was "completely unacceptable" for Russian intelligence services to target work on the pandemic.
"While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health," he said in a statement. He said Britain would work with allies to hold perpetrators to account.
The NCSC said the group's attacks were continuing and used a variety of tools and techniques, including spear-phishing and custom malware.
"APT29 is likely to continue to target organisations involved in COVID-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic," the NCSC statement said.
The U.S. Department of Homeland Security and U.S. Cyber Command also released technical information on Thursday about three hacking tools being deployed by the Russian hackers, codenamed WELLMAIL, SOREFANG and WELLMESS.
Private sector cybersecurity researchers who had spotted the WELLMESS malware over the last year were unaware of its Russian origins until Thursday.
In several cases, WELLMESS was found within U.S. pharmaceutical companies, said three investigators familiar with the matter, who spoke on condition of anonymity to discuss confidential information. The tool allowed the hackers to stealthily gain remote access to secure computers. They declined to name the victims.
Britain and the United States said in May that networks of hackers were targeting national and international organisations responding to the pandemic. But such attacks have not previously been explicitly connected to the Russian state.
Reuters
Fri Jul 17 2020
![Russia trying to steal COVID-19 vaccine data, say UK, US and Canada Russia trying to steal COVID-19 vaccine data, say UK, US and Canada](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/http://img.astroawani.com/2019-07/81563370407_hacker.jpg)
Cybersecurity researchers said an APT29 hacking tool was used against clients located in United States, Japan, China and Africa over the last year - Filepic
![Hari Kebangsaan: Tidak berkira hias rumah, kereta sejak 24 tahun lepas Hari Kebangsaan: Tidak berkira hias rumah, kereta sejak 24 tahun lepas](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/81723628328_TBKandapan.jpg)
Hari Kebangsaan: Tidak berkira hias rumah, kereta sejak 24 tahun lepas
Kandapan juga cukup terkenal dengan keretanya yang turut dihiasi Jalur Gemilang, bendera Johor dan semua negeri serta pelbagai pelekat imej bertemakan kemerdekaan termasuk wajah pemimpin negara.
![Malaysia kekal destinasi utama bagi pelaburan PTTEP - BMI Malaysia kekal destinasi utama bagi pelaburan PTTEP - BMI](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2021-02/81613025046_TBPelantarMinyak.jpg)
Malaysia kekal destinasi utama bagi pelaburan PTTEP - BMI
Malaysia akan kekal sebagai destinasi utama bagi pelaburan syarikat minyak nasional Thailand, PTT Exploration and Production (PTTEP), dalam jangka masa pendek dan panjang.
Jualan penyaman udara naik mendadak di negara Balkan
Menetap di negara sejuk, mereka tidak pernah terfikir memasang penyaman udara di dalam rumah memandangkan musim panas bukanlah setiap hari. Namun, cuaca panas melampau membuatkan mereka bertukar fikiran.
![Malaysia kecam sekeras-kerasnya pencerobohan ekstremis Zionis Israel ke atas Masjid Al-Aqsa Malaysia kecam sekeras-kerasnya pencerobohan ekstremis Zionis Israel ke atas Masjid Al-Aqsa](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-01/61706688348_wismaputra.jpg)
Malaysia kecam sekeras-kerasnya pencerobohan ekstremis Zionis Israel ke atas Masjid Al-Aqsa
Kerajaan Malaysia mengecam sekeras-kerasnya pencerobohan Masjid Al-Aqsa oleh ekstremis Zionis Israel pada 13 Ogos.
![Reda dengan pemergian anak walaupun bukan pengakhiran diharapkan - Ayah Nidza Afham Reda dengan pemergian anak walaupun bukan pengakhiran diharapkan - Ayah Nidza Afham](https://resizer-awani.eco.astro.com.my/tr:w-177,h-100,q-100,f-auto/https://img.astroawani.com/2024-08/61723653359_TBMOKHTAR.jpg)
Reda dengan pemergian anak walaupun bukan pengakhiran diharapkan - Ayah Nidza Afham
Ayah kepada penyanyi dan Youtubers Muhammad Nidza Afham Mokhtar reda dengan pemergian anak lelakinya walaupun itu bukan pengakhiran yang beliau harapkan.
Ahli perniagaan diberkas, terlibat dalam aktiviti kumpulan mafia
Seorang ahli perniagaan Itali ditangkap di bandar Natal, Brazil pada selasa.
Giuseppe Bruno kini menghadapi tuduhan termasuk melakukan pemerasan dan pengubahan wang haram dan juga penglibatan bersama kumpulan mafia.
Giuseppe Bruno kini menghadapi tuduhan termasuk melakukan pemerasan dan pengubahan wang haram dan juga penglibatan bersama kumpulan mafia.
Srettha hormati keputusan mahkamah
Srettha Thavisin menghormati keputusan Mahkamah Perlembagaan Thailand yang memecatnya daripada jawatan Perdana Menteri.
Lahir empat hari lepas, bayi kembar maut angkara serangan rejim Zionis
Kembar lelaki diberikan nama Asser manakala Ayssel pula nama diberi buat kembar perempuan, kedua-duanya lahir pada 10 Ogos lepas.
Lelaki tikam ibu saudara direman tujuh hari
Seorang lelaki yang disyaki menikam ibu saudaranya di kepala dengan gunting, semalam direman selama tujuh hari hingga 21 Ogos ini.
PN senarai pendek tiga calon, akan diumum selepas PRK Nenggiri
Perikatan Nasional telah menyenarai pendek tiga calon untuk bertanding pada Pilihan Raya Kecil (PRK) Dewan Undangan Negeri (DUN) Mahkota yang dijadualkan berlangsung pada 28 September depan.