(The Canadian Press)

Russian hackers seeking to steal COVID-19 vaccine data: intel agencies

It is believed APT29, also known as ‘the Dukes’ or ‘Cozy Bear’ was responsible

Canadian, British and U.S. security services say hackers they believe are working for Russian intelligence have been trying to steal research on COVID-19 vaccines from organizations in all three countries and around the world.

Canada’s Communications Security Establishment says the malicious cyberactivities were very likely undertaken to pilfer information and intellectual property relating to the development and testing of vaccines for the novel coronavirus.

The cyberspy agency says the clandestine activity is hindering response efforts at a time when health-care experts and medical researchers need every available resource to help fight the pandemic.

The CSE’s Centre for Cyber Security assesses that APT29, also known as ”the Dukes” or “Cozy Bear,” was responsible, and almost certainly operates as part of Russian intelligence services.

“The group uses a variety of tools and techniques to predominantly target governmental, diplomatic, think-tank, health-care and energy targets for intelligence gain,” says a joint advisory from the CSE and its allies.

“APT29 is likely to continue to target organizations involved in COVID-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic.”

This assessment is supported by partners at Britain’s Government Communications Headquarters’ National Cyber Security Centre, the U.S. National Security Agency, and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency.

The CSE is urging Canadian health organizations to review a technical advisory on the threat and to take any necessary actions to protect themselves. “We encourage them as well to contact the Cyber Centre if they suspect they have been targeted by cyberactors.”

The joint advisory says APT29 targeted COVID-19 vaccine research and development by scanning specific computer IP addresses of interest for vulnerabilities, a tactic that can help the group obtain login credentials to systems.

“This broad targeting potentially gives the group access to a large number of systems globally, many of which are unlikely to be of immediate intelligence value,” the advisory says.

“The group may maintain a store of stolen credentials in order to access these systems in the event that they become more relevant to their requirements in the future.”

By Jim Bronskill , The Canadian Press

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

RCMP. (Phil McLachlan - Black Press Media)
Kelowna Mountie hit with 2nd lawsuit in 2 months for alleged assault

Const. Julius Prommer is accused of breaking a woman’s knee during while responding to a noise complaint

One Peak Creative has made a catapult which allows children to receive candy in a socially distanced fashion. (Onepeakcreative - Instagram)
Kelowna production company creates Halloween catapult

One Peak Creative promoted the product by making a reality TV style video

Image: Dave Ogilvie.
Man with leg injury rescued from West Kelowna trail

The incident happened in the Glenrosa area

Man experiencing homelessness lying on the bench. (File photo)
CMHA opens fourth supportive housing in Kelowna

Ellis Place will open on the first week of November

An artist’s rendering of the proposed development that would replace the Hiawatha RV Park in Kelowna. (Contributed)
Eviction notice leaves Kelowna trailer park resident fearing homelessness

44 mobile home units at Hiawatha RV Park were served an eviction notice yesterday, making room for new development

Burnaby RCMP responded to a dine-and-dash suspect who fell through a ceiling in March 2020. (RCMP handout)
VIDEO: Suspected dine-and-dasher falls through ceiling of Burnaby restaurant

A woman believed to be dashing on her restaurant bill fell through the kitchen ceiling

Bear sightings have been reported in a residential area in Summerland in late October. The Conservation Officer Service is urging people to take measures so bears are not drawn to the area (Black Press file photo)
Bear sightings reported from Summerland neighbourhood

Conservation Officer Service urges people not to leave garbage outside

Hirdeypal Batth, 24, has been charged with sexual assault and forcible confinement in relation to an incident in August 2020. (VPD handout)
Man, 24, charged with sex assault after allegedly posing as fake Uber driver in Vancouver

Investigators believe there could be more victims outside of the Vancouver area

Melissa Leveque claims that on June 2, 2020 she spilled hot tea on her lap due to negligence on the part of staff at Penticton’s Riverside Starbucks drive-thru. (Google maps photo)
Woman sues Starbucks over hot tea spill at Penticton drive-thru

Melissa Leveque claims she suffered second degree burns, seeking $35,000

Is it time to start thinking about greener ways to package cannabis?

Packaging suppliers are still figuring eco-friendly and affordable packaging options that fit the mandates of Cannabis Regulations

B.C. Premier John Horgan and Washington Gov. Jay Inslee arrive for annual Cascadia conference in Vancouver, Oct. 10, 2018. They have agreed to coordinate the permanent switch to daylight saving time. (B.C. government)
B.C. still awaiting U.S. approval to eliminate daylight saving time

Clocks going back one hour Nov. 1 in Washington too

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

A man was caught on surveillance taking a large outdoor heater from the patio at Intermezzo early morning Wednesday, Oct. 28. (Contributed)
WATCH: Heater theft leaves Okanagan business cold

Patio heater stolen from Intermezzo, found trashed

Vernon North Okanagan RCMP and a local Vernon man are asking the public to keep their eyes peeled for a unique piece of art stolen from Chris Saunders’ Okanagan Landing home Monday, Oct. 12, 2020. (Chris Saunders - Contributed)
Unique work of art stolen from Vernon man’s courtyard

‘Theft and trespass violations are getting out of control in Okanagan Landing’

Most Read