Hacker group APT29 — also known as Cozy Bear and the Dukes — accused of conducting malicious attacks
A Russian-backed hacker group has tried to steal COVID-19-related vaccine research in Canada, the U.K. and the U.S., according to intelligence agencies in all three countries.
The Communications Security Establishment (CSE), responsible for Canada’s foreign signals intelligence, said APT29 — also known as Cozy Bear and the Dukes — is behind the malicious activity.
The group “almost certainly operates as part of Russian intelligence services,” the CSE said in a statement released Thursday morning in co-ordination with its international counterparts, an allegation the Kremlin immediately denied.
When asked if the malicious hits were successful and what facilities in Canada were targeted, a spokesperson said the CSE is generally “not able to comment on, or confirm details about specific cybersecurity incidents.”
“These malicious cyber activities were very likely undertaken to steal information and intellectual property relating to the development and testing of COVID-19 vaccines, and serve to hinder response efforts at a time when health-care experts and medical researchers need every available resource to help fight the pandemic,” the CSE statement says.
The three targeted countries said the Russian actors have been using custom malware known as WellMess and WellMail to attack a number of organizations globally during the pandemic.
In May, the CSE said authorities were investigating possible security breaches at Canadian organizations doing COVID-19-related research but did not say who was behind the attacks and where they were coming from.
The agency has been warning since the start of the crisis that Canadian intellectual property linked to the pandemic is a “valuable target” for state-sponsored actors.
Recent Comments