'Russia-backed' hacker group Cozy Bear accused of trying to steal Covid-19 vaccine data

Sean Gallup/Getty Images
  • The UK has accused hackers backed by Russia of trying to steal Covid-19 vaccine and treatment research.
  • The Kremlin has refuted these claims.
  • A group known as "Cozy Bear" is said to be making the attacks.

Hackers backed by the Russian state are trying to steal Covid-19 vaccine and treatment research from academic and pharmaceutical institutions around the world, Britain's National Cyber Security Centre (NCSC) said on Thursday.

A co-ordinated statement from Britain, the United States and Canada attributed the attacks to group APT29, also known as Cozy Bear, which they said was almost certainly operating as part of Russian intelligence services.

"We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic," said NCSC Director of Operations, Paul Chichester.

British foreign minister Dominic Raab said it was "completely unacceptable" for Russian intelligence services to target work on the pandemic.

Reckless

"While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health," he said in a statement. He said Britain would work with allies to hold perpetrators to account.

The NCSC said the group's attacks were ongoing and used a variety of tools and techniques, including spear-phishing and custom malware.

"APT29 is likely to continue to target organisations involved in Covid-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic," the NCSC statement said.

Britain and the United States said in May that networks of hackers were targeting national and international organisations responding to the Covid-19 pandemic. But such attacks have not previously been explicitly connected to the Russian state.

The Russian government-linked group Cozy Bear is widely suspected of hacking the Democratic Party ahead of the 2016 U.S. election. 

AFP reported that the Kremlin refuted these claims. "We have no information on who could have hacked pharmaceutical companies and research centres in Britain," Kremlin spokesman Dmitry Peskov told the TASS news agency.

"We can only say this: Russia has nothing to do with these attempts."

Lockdown For
DAYS
HRS
MINS
Voting Booth
Russia has approved a Covid-19 vaccine. Would you take the vaccine if it were available in South Africa?
Please select an option Oops! Something went wrong, please try again later.
Results
Yes I would
29% - 797 votes
No I would not
25% - 684 votes
I'd wait to see the outcomes first
46% - 1271 votes
Vote
ZAR/USD
17.51
(+0.82)
ZAR/GBP
22.92
(+0.96)
ZAR/EUR
20.62
(+0.72)
ZAR/AUD
12.54
(+0.94)
ZAR/JPY
0.16
(+1.52)
Gold
1944.93
(-4.09)
Silver
27.10
(-6.76)
Platinum
958.99
(-2.55)
Brent Crude
44.95
(+1.33)
Palladium
2109.77
(-4.62)
All Share
57168.24
(+0.72)
Top 40
52831.61
(+0.76)
Financial 15
10215.75
(+3.21)
Industrial 25
75524.64
(+1.14)
Resource 10
58677.82
(-0.46)
All JSE data delayed by at least 15 minutes morningstar logo