APT Groups Target Healthcare and Essential Services

ronjor · May 5, 2020

Original release date: May 05, 2020
Summary

This is a joint alert from the United States Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s National Cyber Security Centre (NCSC).
CISA and NCSC continue to see indications that advanced persistent threat (APT) groups are exploiting the Coronavirus Disease 2019 (COVID-19) pandemic as part of their cyber operations. This joint alert highlights ongoing activity by APT groups against organizations involved in both national and international COVID-19 responses. It describes some of the methods these actors are using to target organizations and provides mitigation advice.
The joint CISA-NCSC Alert: (AA20-099A) COVID-19 Exploited by Malicious Cyber Actors from April 8, 2020, previously detailed the exploitation of the COVID-19 pandemic by cybercriminals and APT groups. This joint CISA-NCSC Alert provides an update to ongoing malicious cyber activity relating to COVID-19. For a graphical summary of CISA’s joint COVID-19 Alerts with NCSC, see the following guide.
Click to expand...

guest · Jul 16, 2020

NCSC
Advisory: APT29 targets COVID-19 vaccine development
July 16, 2020
https://www.ncsc.gov.uk/news/advisory-apt29-targets-covid-19-vaccine-development

This report details recent Tactics, Techniques and Procedures (TTPs) of the group commonly known as ‘APT29’, also known as ‘the Dukes’ or ‘Cozy Bear’.
This report provides indicators of compromise as well as detection and mitigation advice.

Throughout 2020, APT29 has targeted various organisations involved in COVID-19 vaccine development in Canada, the United States and the United Kingdom, highly likely with the intention of stealing information and intellectual property relating to the development and testing of COVID-19 vaccines.
APT29 is using custom malware known as ‘WellMess’ and ‘WellMail’ to target a number of organisations globally.
Click to expand...

Download the full Advisory below.
The Foreign Secretary has issued a statement regarding this advisory. You can read the statement in full on GOV.UK.
Click to expand...

Log in or Sign up

APT Groups Target Healthcare and Essential Services

ronjor Global Moderator

guest Guest

Log in or Sign up

APT Groups Target Healthcare and Essential Services

ronjor Global Moderator

guest Guest

Useful Searches