Hackers backed by the Russian state are trying to steal COVID-19 vaccine and treatment research from academic and pharmaceutical institutions around the world, Britain's National Cyber Security Centre (NCSC) says.
A co-ordinated statement from Britain, the United States and Canada attributed the attacks to group APT29, also known as 'Cozy Bear', which they said was almost certainly operating as part of Russian intelligence services.
"We condemn these despicable attacks against those doing vital work to combat the coronavirus pandemic," said NCSC Director of Operations, Paul Chichester on Thursday.
The NCSC said in a statement the group's attacks were ongoing and used a variety of tools and techniques, including spear-phishing and custom malware.
"APT29 is likely to continue to target organisations involved in COVID-19 vaccine research and development, as they seek to answer additional intelligence questions relating to the pandemic," the NCSC statement said.
Britain and the United States said in May that networks of hackers were targeting national and international organisations responding to the COVID-19 pandemic. But such attacks have not previously been explicitly connected to the Russian state.
The Russian government-linked group Cozy Bear is widely suspected of hacking the Democratic Party ahead of the 2016 US election.
British Foreign Secretary Dominic Raab expressed outrage at the findings, which were published alongside an advisory on how organisations can help protect themselves from cyber attacks.
"It is completely unacceptable that the Russian Intelligence Services are targeting those working to combat the coronavirus pandemic," he said.
"While others pursue their selfish interests with reckless behaviour, the UK and its allies are getting on with the hard work of finding a vaccine and protecting global health.
"The UK will continue to counter those conducting such cyber attacks, and work with our allies to hold perpetrators to account."
The NCSC said that government, diplomatic, think-tank, healthcare and energy groups were mainly being targeted, in a bid "to steal valuable intellectual property".
The TASS news agency cited Kremlin spokesman Dmitry Peskov as saying the Russian government had nothing to do any alleged hacker attacks.
RIA cited Mr Peskov as saying the Kremlin rejected UK authorities' allegations, which he said were not backed by proper evidence.
Additional reporting by AFP.
