Tuesday 25 January 2022
- Advertisement -

Chinese hackers target Serum Institute of India, Bharat Biotech

The US Department of Justice said in 2018 that APT10 had acted in association with the Chinese Ministry of State Security

A Chinese state-backed hacking group has in recent weeks targeted the IT systems of two Indian vaccine makers, the shots of which are being used in the country’s immunisation campaign, cyber intelligence firm Cyfirma told Reuters.

China and India have both sold or gifted Covid-19 shots to many countries. India produces more than 60% of all vaccines sold in the world.

Goldman Sachs-backed Cyfirma, based in Singapore and Tokyo, said Chinese hacking group APT10, known as Stone Panda, had identified gaps and vulnerabilities in the IT infrastructure and supply chain software of Bharat Biotech and the Serum Institute of India (SII), the world’s largest vaccine maker.

“The real motivation here is actually exfiltrating intellectual and getting competitive advantage over Indian pharmaceutical companies,” said Cyfirma Chief Executive Kumar Ritesh, formerly a top cyber official with British foreign intelligence agency MI6.

He said APT10 was actively targeting SII, which is making the AstraZeneca vaccine for many countries and will soon start bulk-manufacturing Novavax shots.

“In the case of Serum Institute, they have found a number of their public servers running weak web servers, these are vulnerable web servers,” Mr Ritesh said, referring to the hackers.

“They have spoken about weak web application, they are also talking about weak content-management system. It’s quite alarming.”

China’s foreign ministry did not immediately reply to a request for comment.

SII and Bharat Biotech declined to comment. The government-run Computer Emergency Response Team, with whom Cyfirma said it had shared its findings, had no immediate comment.

The US Department of Justice said in 2018 that APT10 had acted in association with the Chinese Ministry of State Security.

Microsoft said in November that it had detected cyber attacks from Russia and North Korea targeting COVID-19 vaccine companies in India, Canada, France, South Korea and the United States. North Korean hackers tried to break into the systems of British drugmaker AstraZeneca, Reuters has reported.

Ritesh, whose firm follows the activities of some 750 cyber criminals and monitors nearly 2,000 hacking campaigns using a tool called decipher, said it was not yet clear what vaccine-related information APT10 may have accessed from the Indian companies.

Bharat Biotech’s COVAXIN shot, developed with the state-run Indian Council of Research, will be exported to many countries, including Brazil.

US drugmaker Pfizer Inc and its German partner BioNTech SE said in December that documents related to development of their Covid-19 vaccine had been “unlawfully accessed” in a cyberattack on Europe’s medicines regulator.

Reutershttps://www.sirfnews.com/
Reuters is an international news organization owned by Thomson Reuters. It employs some 2,500 journalists and 600 photojournalists in about 200 locations worldwide. The agency was established in London in 1851 by the German-born Paul Reuter. It was acquired by the Thomson Corporation in 2008 and now makes up the media division of Thomson Reuters.

Get in Touch

0 0 votes
Article Rating
Subscribe
Notify of

This site uses Akismet to reduce spam. Learn how your comment data is processed.

0 Comments
Inline Feedbacks
View all comments
spot_img

Related Articles

Editorial

Get in Touch

7,493FansLike
2,450FollowersFollow
0SubscribersSubscribe

Columns

0
Would love your thoughts, please comment.x
()
x
[prisna-google-website-translator]
%d bloggers like this: