Bulletin
Investor Alert

Associated Press Archives | Email alerts

Dec. 3, 2020, 1:47 p.m. EST

Phishing ploy targeted WHO COVID-19 vaccine distribution effort

new
Watchlist Relevance
LEARN MORE

Want to see how this story relates to your watchlist?

Just add items to create a watchlist now:

  • X
    International Business Machines Corp. (IBM)
  • X
    Microsoft Corp. (MSFT)
  • X
    Pfizer Inc. (PFE)

or Cancel Already have a watchlist? Log In

By Associated Press

BOSTON (AP) — IBM security researchers say they have detected a cyberespionage effort using targeted phishing emails to try to collect vital information on the World Health Organization’s initiative for distributing COVID-19 vaccine to developing countries.

The researchers said they could not be sure who was behind the campaign, which began in September, or if it was successful. But the precision targeting and careful efforts to leave no tracks bore “the potential hallmarks of nation-state tradecraft,” they said in a blog post Thursday.

The campaign’s targets, in countries including Germany, Italy, South Korea and Taiwan, are likely associated with the development of the “cold chain” needed to ensure coronavirus vaccines get the nonstop sterile refrigeration they need to be effective for the nearly 3 billion people who live where temperature-controlled storage is insufficient, IBM /zigman2/quotes/203856914/composite IBM -9.91% said.

“Think of it as the bloodline that will be supplying the most vital vaccines globally,” said Claire Zaboeva, an IBM analyst involved in the detection.

The U.S. Cybersecurity and Infrastructure Security Agency later issued an advisory encouraging Operation Warp Speed, the Trump administration’s vaccine program, and other organizations involved in vaccine storage and transport, to review IBM’s findings.

Whoever is behind the operation could be motivated by a desire to learn how the vaccines are best able to be shipped and stored — the entire refrigeration process — in order to copy it, said Nick Rossmann, the IBM team’s global threat intelligence lead. Or they might want to be able to undermine a vaccine’s legitimacy or launch a disruptive or destructive attack, he added.

See also: What we still don’t know about COVID vaccines after the U.K.’s emergency-use authorization of the Pfizer-BioNTech candidate

In the ploy, executives with groups likely associated with the initiative known as Covax — created by the Gavi Vaccine Alliance, the World Health Organization and other U.N. agencies — were sent spoofed emails appearing to come from an executive of Haier Biomedical, a Chinese company considered the world’s main cold-chain supplier, the analyst said.

The phishing emails had malicious attachments that prompted recipients to enter credentials that could have been used to harvest sensitive information about partners vital to the vaccine-delivery platform.

Targets included the European Commission’s Directorate-General for Taxation and Customs Union and companies that make solar panels for powering portable vaccine refrigerators. Other targets were petrochemical companies, likely because they produce dry ice, which is used in the cold chain, Zaboeva said.

The EU agency has been busy revising new import and export regimes for coronavirus vaccines and would be a gold mine for hackers seeking stepping stones into partnering organizations, she said.

Covax has struggled to raise enough money to compete for vaccine contracts against the world’s wealthiest nations in the race to secure doses as fast as they can be produced. But the UN and Gavi have invested millions in cold-chain equipment across Africa and Asia. The investment, in the works well before the pandemic, was accelerated to prepare for an eventual global rollout of coronavirus vaccines.

Whoever was behind the phishing operation likely sought “advanced insight into the purchase and movement of a vaccine that can impact life and the global economy,” the blog post said. Coronavirus vaccines will be one of the world’s most sought-after products as they are distributed, so theft may also be a danger.

Last month, Microsoft /zigman2/quotes/207732364/composite MSFT +0.44% said it had detected mostly unsuccessful attempts by state-backed Russian and North Korean hackers to steal data from leading pharmaceutical companies and vaccine researchers. It gave no information on how many succeeded or how serious those breaches were. Chinese state-backed hackers have also targeted vaccine makers, the U.S. government said in announcing criminal charges in July.

Microsoft said most of the targets — located in Canada, France, India, South Korea and the United States — were researching vaccines and COVID-19 treatments. It did not name the targets.

On Wednesday, Britain became the first to country to authorize a rigorously tested COVID-19 vaccine, the one developed by American drugmaker Pfizer /zigman2/quotes/202877789/composite PFE +0.19% and Germany’s BioNTech /zigman2/quotes/214419716/composite BNTX +2.85% .

Other countries aren’t far behind: Regulators not only in the U.S. but in the European Union and Canada also are vetting the Pfizer vaccine along with a shot made by Moderna Inc. /zigman2/quotes/205619834/composite MRNA -1.47% British and Canadian regulators are also considering a vaccine made by AstraZeneca /zigman2/quotes/200304487/composite AZN +1.33% and Oxford University.

The logistical challenges of distributing vaccines globally are huge. The Pfizer-BioNTech one must be stored and shipped at ultra-cold temperatures of around minus 94 degrees Fahrenheit.

/zigman2/quotes/203856914/composite
US : U.S.: NYSE
$ 118.61
-13.04 -9.91%
Volume: 38.06M
Jan. 22, 2021 4:00p
P/E Ratio
19.02
Dividend Yield
5.50%
Market Cap
$105.69 billion
Rev. per Employee
N/A
loading...
/zigman2/quotes/207732364/composite
US : U.S.: Nasdaq
$ 225.95
+0.98 +0.44%
Volume: 30.17M
Jan. 22, 2021 4:00p
P/E Ratio
36.45
Dividend Yield
0.99%
Market Cap
$1708.29 billion
Rev. per Employee
$877,393
loading...
/zigman2/quotes/202877789/composite
US : U.S.: NYSE
$ 36.55
+0.07 +0.19%
Volume: 26.27M
Jan. 22, 2021 4:00p
P/E Ratio
23.67
Dividend Yield
4.27%
Market Cap
$203.16 billion
Rev. per Employee
$586,070
loading...
/zigman2/quotes/214419716/composite
US : U.S.: Nasdaq
$ 108.44
+3.01 +2.85%
Volume: 1.70M
Jan. 22, 2021 4:00p
P/E Ratio
N/A
Dividend Yield
N/A
Market Cap
$26.11 billion
Rev. per Employee
$92,777
loading...
/zigman2/quotes/205619834/composite
US : U.S.: Nasdaq
$ 131.02
-1.96 -1.47%
Volume: 10.07M
Jan. 22, 2021 4:00p
P/E Ratio
N/A
Dividend Yield
N/A
Market Cap
$51.85 billion
Rev. per Employee
$72,541
loading...
/zigman2/quotes/200304487/composite
US : U.S.: Nasdaq
$ 53.25
+0.70 +1.33%
Volume: 13.37M
Jan. 22, 2021 4:00p
P/E Ratio
55.59
Dividend Yield
2.57%
Market Cap
$139.57 billion
Rev. per Employee
$346,812
loading...

This Story has 0 Comments
Be the first to comment
More News In
Industries

Story Conversation

Commenting FAQs »
Link to MarketWatch's Slice.