(The Canadian Press)

Russian hackers seeking to steal COVID-19 vaccine data: intel agencies

It is believed APT29, also known as ‘the Dukes’ or ‘Cozy Bear’ was responsible

Canadian, British and U.S. security services say hackers they believe are working for Russian intelligence have been trying to steal research on COVID-19 vaccines from organizations in all three countries and around the world.

Canada’s Communications Security Establishment says the malicious cyberactivities were very likely undertaken to pilfer information and intellectual property relating to the development and testing of vaccines for the novel coronavirus.

The cyberspy agency says the clandestine activity is hindering response efforts at a time when health-care experts and medical researchers need every available resource to help fight the pandemic.

The CSE’s Centre for Cyber Security assesses that APT29, also known as ”the Dukes” or “Cozy Bear,” was responsible, and almost certainly operates as part of Russian intelligence services.

“The group uses a variety of tools and techniques to predominantly target governmental, diplomatic, think-tank, health-care and energy targets for intelligence gain,” says a joint advisory from the CSE and its allies.

“APT29 is likely to continue to target organizations involved in COVID-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic.”

This assessment is supported by partners at Britain’s Government Communications Headquarters’ National Cyber Security Centre, the U.S. National Security Agency, and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency.

The CSE is urging Canadian health organizations to review a technical advisory on the threat and to take any necessary actions to protect themselves. “We encourage them as well to contact the Cyber Centre if they suspect they have been targeted by cyberactors.”

The joint advisory says APT29 targeted COVID-19 vaccine research and development by scanning specific computer IP addresses of interest for vulnerabilities, a tactic that can help the group obtain login credentials to systems.

“This broad targeting potentially gives the group access to a large number of systems globally, many of which are unlikely to be of immediate intelligence value,” the advisory says.

“The group may maintain a store of stolen credentials in order to access these systems in the event that they become more relevant to their requirements in the future.”

By Jim Bronskill , The Canadian Press

Like us on Facebook and follow us on Twitter.

Want to support local journalism? Make a donation here.

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

A water quality advisory has been issued for the City of Rupert on Oct. 31. (File photo)
Water Quality Advisory issued for City of Prince Rupert

Heavy rainfall contributes to high turbidity levels

Prince Rupert Regional Airport Manager Rick Leach said on Oct. 29 that small community airports, like YPR, need a government cash infusion to survive COVID-19. (Northern View file photo)
Failure of Government and airlines leave regional and community airports on the brink of financial collapse

Govt. cash infusion is needed for smaller airports, like Prince Rupert, to survive COVID-19 - RCAC

Confirmed COVID-19 cases have affected the Prince Rupert community the week of Oct. 29 with a Shoppers Drug Mart employee and an S.D. 52 staff or student being infected with the virus. (Image courtesy CDC)
COVID-19 infects Prince Rupert school district individual

S.D. 52 is prepared for COVID-19 and is working under Northern Health protocols - Sandy Pond

Masks are now compulsory at all Prince Rupert public facilities and the City reminds people to discard used masks in waste bins, a media release on Oct. 29 said. (Photo by K-J Millar/The Northern View)
Mandatory mask-wearing effective immediately at city public facilities

City of Prince Rupert makes masks compulsory to protect community health and safety

Over the years, Janice Blackie-Goodine’s home in Summerland has featured elaborate Halloween displays and decorations each October. (File photo)
QUIZ: How much do you really know about Halloween?

Oct. 31 is a night of frights. How much do you know about Halloween customs and traditions?

FILE - In this Jan. 23, 1987 file photo, actor Sean Connery holds a rose in his hand as he talks about his new movie “The Name of the Rose” at a news conference in London. Scottish actor Sean Connery, considered by many to have been the best James Bond, has died aged 90, according to an announcement from his family. (AP Photo/Gerald Penny, File)
Actor Sean Connery, the ‘original’ James Bond, dies at 90

Oscar-winner was knighted by Queen Elizabeth II in 2000

This house at 414 Royal Ave. became notorious for its residents’ and visitors’ penchant for attracting police. It was also the site of a gruesome torture in August 2018. It was demolished in 2019. KTW
6-year sentence for Kamloops man who helped carve ‘rat’ into flesh of fellow gang member

Ricky Dennis was one of three men involved in the August 2018 attack

Cpl. Nathan Berze, media officer for the Mission RCMP, giving an update on the investigation at 11:30 a.m., Oct. 30. Patrick Penner photo.
VIDEO: Prisoner convicted of first-degree murder still at large from Mission Institution

When 10 p.m. count was conducted, staff discovered Roderick Muchikekwanape had disappeared

Among the pumpkin carvings created this year by Rick Chong of Abbotsford is this tribute to fallen officer Cont. Allan Young.
Abbotsford pumpkin carver’s creations include fallen police officer

Rick Chong carves and displays 30 pumpkins every year

Join Black Press Media and Do Some Good

Pay it Forward program supports local businesses in their community giving

An online fundraising campaign in support of the six-year-old boy, Edgar Colby, who was hit by a car on Range Road Oct. 25 has raised more than $62,000 in a day. (Submitted)
$62K raised in 1 day for boy in coma at BC Children’s after being hit by vehicle in Yukon

The boy’s aunt says the family is “very grateful” for the support they’ve received from the community

Health care employees take extensive precautions when working with people infected or suspected of having COVID-19. THE CANADIAN PRESS/Chris Young
WorkSafeBC disallows majority of COVID-19 job injury claims

Health care, social services employees filing the most claims

Conservative leader Erin O’Toole rises during Question Period in the House of Commons in Ottawa on Wednesday October 28, 2020. (Adrian Wyld/The Canadian Press)
Conversion therapy ban gets approval in principle, exposes Conservative divisions

Erin O’Toole himself voted in favour of the bill, as did most Conservative MPs

Most Read