Four details:
1. The attacks began in September and focused on companies associated with the COVID-19 cold chain, which ensures vaccines will be stored and transported in temperature-controlled environments.
2. The campaign has targeted organizations in six countries and has the “potential hallmarks of nation-state tradecraft,” according to the report.
3. The phishing attacks impersonated an executive from Chinese company Haier Biomedical, which is a qualified supplier in the Vaccine Alliance’s Cold Chain Equipment Optimization Platform program. The hackers sent phishing emails to organizations that provide material support to meet the transportation requirements for the vaccine.
4. IBM’s report stated that the campaign’s purpose may have been to gain credentials and future unauthorized access to corporate networks and sensitive information about COVID-19 vaccine distribution.
5. The attack targeted sales, procurement, IT and finance executives of the cold chain companies. IBM said it was unable to detect whether the phishing scam was successful.
More articles on cybersecurity:
Computers stolen in Minnesota clinic robbery, info of 1,500 patients potentially exposed
North Korean hackers target drugmakers developing COVID-19 vaccines, treatments
Montefiore alerts patients of privacy breach linked to billing scam: 4 details
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.
