A refrigerated truck drives out of the Pfizer Manufacturing plant in Puurs, Belgium, on Thursday, Dec. 3, 2020. British officials on Wednesday authorized a COVID-19 vaccine for emergency use, greenlighting the world's first shot against the virus that's backed by rigorous science and taking a major step toward eventually ending the pandemic. (AP Photo/Virginia Mayo)

Phishing ploy targets COVID-19 vaccine distribution effort

BOSTON — IBM security researchers say they have detected a cyberespionage effort using targeted phishing emails to try to collect vital information on the World Health Organization’s initiative for distributing COVID-19 vaccine to developing countries.

The researchers said they could not be sure who was behind the campaign, which began in September, or if it was successful. But the precision targeting and careful efforts to leave no tracks bore “the potential hallmarks of nation-state tradecraft,” they said in a blog post Thursday.

The campaign’s targets, in countries including Germany, Italy, South Korea and Taiwan, are likely associated with the development of the “cold chain” needed to ensure coronavirus vaccines get the nonstop sterile refrigeration they need to be effective for the nearly 3 billion people who live where temperature-controlled storage is insufficient, IBM said.

“Think of it as the bloodline that will be supplying the most vital vaccines globally,” said Claire Zaboeva, an IBM analyst involved in the detection.

Whoever is behind the operation could be motivated by a desire to learn how the vaccines are best able to be shipped and stored — the entire refrigeration process — in order to copy it, said Nick Rossmann, the IBM team’s global threat intelligence lead. Or they might want to be able to undermine a vaccine’s legitimacy or launch a disruptive or destructive attack, he added.

In the ploy, executives with groups likely associated with the initiative known as Covax — created by the Gavi Vaccine Alliance, the World Health Organization and other U.N. agencies — were sent spoofed emails appearing to come from an executive of Haier Biomedical, a Chinese company considered the world’s main cold-chain supplier, the analyst said.

The phishing emails had malicious attachments that prompted recipients to enter credentials that could have been used to harvest sensitive information about partners vital to the vaccine-delivery platform.

Targets included the European Commission’s Directorate-General for Taxation and Customs Union and companies that make solar panels for powering portable vaccine refrigerators. Other targets were petrochemical companies, likely because they produce dry ice, which is used in the cold chain, Zaboeva said.

The EU agency has been busy revising new import and export regimes for coronavirus vaccines and would be a gold mine for hackers seeking stepping stones into partnering organizations, she said.

Covax has struggled to raise enough money to compete for vaccine contracts against the world’s wealthiest nations in the race to secure doses as fast as they can be produced. But the UN and Gavi have invested millions in cold-chain equipment across Africa and Asia. The investment, in the works well before the pandemic, was accelerated to prepare for an eventual global rollout of coronavirus vaccines.

Whoever was behind the phishing operation likely sought “advanced insight into the purchase and movement of a vaccine that can impact life and the global economy,” the blog post said. Coronavirus vaccines will be one of the world’s most sought-after products as they are distributed, so theft may also be a danger.

Last month, Microsoft said it had detected mostly unsuccessful attempts by state-backed Russian and North Korean hackers to steal data from leading pharmaceutical companies and vaccine researchers. It gave no information on how many succeeded or how serious those breaches were. Chinese state-backed hackers have also targeted vaccine makers, the U.S. government said in announcing criminal charges in July.

Microsoft said most of the targets — located in Canada, France, India, South Korea and the United States — were researching vaccines and COVID-19 treatments. It did not name the targets.

On Wednesday, Britain became the first to country to authorize a rigorously tested COVID-19 vaccine, the one developed by American drugmaker Pfizer and Germany’s BioNTech.

Other countries aren’t far behind: Regulators not only in the U.S. but in the European Union and Canada also are vetting the Pfizer vaccine along with a shot made by Moderna Inc. British and Canadian regulators are also considering a vaccine made by AstraZeneca and Oxford University.

The logistical challenges of distributing vaccines globally are huge. The Pfizer-BioNTech one must be stored and shipped at ultra-cold temperatures of around minus 70 degrees Celsius (minus 94 degrees Fahrenheit).

___

Associated Press writer Lori Hinnant in Paris contributed to this report.

Frank Bajak, The Associated Press

Get local stories you won't find anywhere else right to your inbox.
Sign up here

Just Posted

Police have charged two men after they allegedly tried to break into the Bentley post office with a semi. (Photo courtesy of RCMP)
Red Deer men charged in Bentley post office destruction

Police have charged a pair of Red Deer men after an attempted… Continue reading

Red Deer Fire Chief Ken McMullen remains concerned about “inconsistencies” in the province’s new way of dispatching local ambulances. (Advocate file photo).
A few glitches are already noticed in Red Deer’s new ambulance dispatch system

Local fire-medics need more data about ambulance arrival times

Alberta chief medical officer of health Dr. Deena Hinshaw said the province still hopes to bring the hospitalization number down before relaxing restrictions. (photography by Chris Schwarz/Government of Alberta)
14 new deaths, 366 new COVID-19 cases in Alberta

Province nearing 100K COVID-19 vaccine doses administered

Cervus Equipment is planning to set up a new location near Highways 2 and 42 in Red Deer County. Graphic contributed
Cervus Equipment eyeing new Red Deer County location

Farm equipment busy looking to set up near Highways 2 and 42

Terrance Josephson of the Princeton Posse, at left, and Tyson Conroy of the Summerland Steam clash during a Junior B hockey game at the Summerland Arena in the early spring of 2020. (John Arendt - Summerland Review)
QUIZ: How much do you know about hockey?

Test your knowledge of Canada’s national winter sport

This undated photo provided by the Polk County Sheriff's Office, in Florida, shows Joshua Colon. On Tuesday, Jan. 26, 2021, officials said that Colon, who had been recently named “Paramedic of the Year,” helped a supervisor steal COVID-19 vaccines meant for first responders. (Polk County Sheriff's Office via AP)
‘Paramedic of the Year’ accused of helping to steal vaccine

‘Paramedic of the Year’ accused of helping to steal vaccine

FILE - In this July 31, 2019, file photo, migrants return to Mexico, using the Puerta Mexico bridge that crosses the Rio Grande river in Matamoros, Mexico, on the border with Brownsville, Texas. A federal judge on Tuesday, Jan. 26, 2021, barred the U.S. government from enforcing a 100-day deportation moratorium that is a key immigration priority of President Joe Biden. U.S. District Judge Drew Tipton issued a temporary restraining order sought by Texas, which sued on Friday against a Department of Homeland Security memo that instructed immigration agencies to pause most deportations. Tipton said the Biden administration had failed “to provide any concrete, reasonable justification for a 100-day pause on deportations.” (AP Photo/Emilio Espejel, File)
Judge bars Biden from enforcing 100-day deportation ban

Judge bars Biden from enforcing 100-day deportation ban

FILE - In this Jan. 23, 2021, file photo, registered Nurse Shyun Lin, left, administers Alda Maxis, 70, the first dose of the COVID-19 vaccine at a pop-up vaccination site in the William Reid Apartments in the Brooklyn borough of New York. An increasing number of COVID-19 vaccination sites around the U.S. are canceling appointments because of vaccine shortages in a rollout so rife with confusion and unexplained bottlenecks. (AP Photo/Mary Altaffer, Pool, File)
US boosting vaccine deliveries amid complaints of shortages

US boosting vaccine deliveries amid complaints of shortages

In this image from video, Sen. Patrick Leahy, D-Vt., the president pro tempore of the Senate, who is presiding over the impeachment trial of former President Donald Trump, swears in members of the Senate for the impeachment trial at the U.S. Capitol in Washington, Tuesday, Jan. 26, 2021. (Senate Television via AP)
GOP largely sides against holding Trump impeachment trial

GOP largely sides against holding Trump impeachment trial

People make their way through floodwaters in Beira Mozambique, Saturday, Jan. 23, 2021. The Mozambican port city of Beira breathed a sigh of relief as Cyclone Eloise caused less damage than feared as it passed through, but the danger of flooding remained in a region still recovering from a devastating cyclone two years ago. (AP Photo)
UN: 250,000 people affected by Cyclone Eloise in Mozambique

UN: 250,000 people affected by Cyclone Eloise in Mozambique

This image released by the Sundance Institute shows Rita Moreno in a scene from "Rita Moreno: Just a Girl Who Decided to Go For It," an official selection of the U.S. Documentary Competition at the 2021 Sundance Film Festival. (Sundance Institute via AP)
With many hungry for content, Sundance market heats up

With many hungry for content, Sundance market heats up

FILE - Actor Danny Huston attends the National Board of Review awards gala in New York on Jan. 8, 2019. Growing up in Ireland, one of his favorite memories was when his father, director John Huston, would bring out the projector and they’d gather around to watch his films. “The Maltese Falcon” was always a highlight. Now the film is celebrating its 80th anniversary. It’s returning to theaters through Fathom Events for a limited engagement on Wednesday. (Photo by Evan Agostini/Invision/AP, File)
‘The Maltese Falcon’ returns to theatres at ripe age of 80

‘The Maltese Falcon’ returns to theatres at ripe age of 80

This photo provided by Eli Lilly shows the drug bamlanivimab. On Tuesday, Jan. 26, 2021, the company said that the two-antibody combo of bamlanivimab and etesevimab reduced the risk of hospitalizations or death by 70% in newly diagnosed, non-hospitalized COVID-19 patients at high risk of serious illness because of age or other health conditions. (Eli Lilly via AP)
Studies extend hopes for antibody drugs against COVID-19

Studies extend hopes for antibody drugs against COVID-19

Most Read