Chinese hackers have stolen data from Spanish laboratories conducting research and working on developing a vaccine for COVID-19. However, this is not the first time that the scientific community working to combat the virus has been targeted by hackers. Since the outbreak of the pandemic, hackers have been carrying out espionage, aiming to steal data related to this project.
According to the Spanish newspaper “El Pais”, which published the news of the attacks targeting Spanish laboratories, there are currently no technical details about the specific attacks or their extent. Paz Esteban, head of Spain’s National Intelligence Center (CNI), said that Chinese hackers carried out cyberattacks against Spain as well as many other countries competing to develop a vaccine for COVID-19.
The director of the CNI pointed out that sensitive sectors such as health have been targeted by a particularly infectious campaign, which is developing activity not only in Spain but also in other countries, against laboratories working on a vaccine to combat COVID-19.
As the Spanish newspaper reports, most of these attacks were carried out by China and Russia, starting with national state actors.
Additionally, in July, the British National Cyber Security Center revealed that the Russian-linked APT29 group is conducting campaigns targeting organizations in the UK, US , and Canada that are working to develop a vaccine for COVID-19.
The cyberattacks against Spanish research laboratories originated from China, but it is not clear what type or volume of data was stolen.
According to Paz Esteban, the head of Spain's intelligence services, the Spanish laboratories were hit by a "particularly virulent campaign" in which hackers "hit" centers working on vaccine development in Spain and other countries.
Also speaking at a seminar organised by the Association of European Journalists (AEJ) last Thursday, Esteban explained that the frequency and sophistication of attacks carried out by hackers have increased during the lockdown. In particular, Esteban warned of a “qualitative and quantitative growth” in cyberattacks during the lockdown period, given that people working remotely are more exposed than ever to hackers.
On the other hand, Chinese officials have denied any involvement in these attacks, arguing that their country is ahead of the curve in COVID-19 vaccine research. Specifically, Wang Wenbin, a spokesman for the Chinese Ministry of Foreign Affairs, stated that research and development on COVID-19 vaccines is ahead of other countries, so they do not need to steal data on what others are doing to develop a vaccine.
In July, two Chinese hackers were indicted by the U.S. Department of Justice (DoJ) for allegedly working with China’s Ministry of State Security to breach the information systems of government agencies and companies worldwide. The hackers targeted companies and organizations in multiple countries, including the U.S., Australia, Belgium, Germany, Japan, Lithuania, the Netherlands, Spain, South Korea, Sweden, and the United Kingdom.
According to prosecutors, the defendants also scanned for vulnerabilities in computer networks of companies seeking vaccines and treatments for COVID-19. A spokesman for Spain’s National Research Council (CSIC) said there had been no theft at its Madrid research centers. In addition, sources at the Hospital Clinic in Barcelona said they were not aware of any intrusion into computers storing the results of an experimental vaccine based on the genetic material of the coronavirus. Similar responses were given by the National Institute of Agriculture and Food Science and Technology (INIA) and the University of Santiago de Compostela.
