Russian-linked hackers target vaccine research

SECURITY: Group APT29 attempting to steal Covid-19 work, NCSC claims

Hackers linked to the Russian intelligence agencies are targeting British scientists seeking to develop a coronavirus vaccine, the National Cyber Security Centre (NCSC) has warned.

In a joint statement with the US National Security Agency and the Canadian Communication Security Establishment, the NCSC said the attacks were part of a global campaign by the group known as APT29 to steal the secrets of vaccine research.

NCSC director of operations Paul Chichester said: “We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic.

“Working with our allies, the NCSC is committed to protecting our most critical assets and our top priority at this time is to protect the health sector. We urge organisations to familiarise themselves with the advice published to help defend their networks.”

The UK is home to two of the leading research programmes to develop a vaccine based at Oxford University and Imperial College London.

The NCSC said that, together with the US and the Canadians, it had assessed that APT29 – also known as the Dukes or Cozy Bear – was “almost certainly” operating as part of the Russian intelligence services.

It said the group’s campaign of “malicious activity” was aimed predominantly at government, diplomatic, thinktank, healthcare and energy targets in an attempt to steal valuable intellectual property.

APT29 is said to use a variety of tools and techniques, including spear-phishing and custom malware known as “Wellmess” and “Wellmail”.

Foreign Secretary Dominic Raab said: “It is completely unacceptable that the Russian Intelligence Services are targeting those working to combat the coronavirus pandemic.

“While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health.”

In another development, the UK Government has said leaked documents highlighted by Jeremy Corbyn during last year’s general election were almost certainly “amplified” online by “Russian actors”.

The papers relating to UK and US trade talks were used by the thenlabour leader to back his claims that the Conservatives were preparing to “sell off” the NHS.

In a written Commons statement, Foreign Secretary Dominic Raab said: “On the basis of extensive analysis, the government has concluded that it is almost certain that Russian actors sought to interfere in the 2019 general election through the online amplification of illicitly acquired and leaked government documents.”

Mr Raab said there was an “ongoing criminal investigation” into how the documents were obtained.

Picture: PA. Foreign Secretary Dominic Raab.