Covid and IT piracy: why it is a danger, especially now
IT piracy continues to evolve along with the development of new technologies. The cyber-criminals’ objectives are also changing as they become more audacious and knowledgeable about their potential targets. They know how to identify more lucrative targets and devise elaborate techniques in order to achieve specific results.
The most recent largescale IT attack involved the cold chain for Covid-19 vaccines. It would seem that a group of hackers has begun to focus specifically on that, with the aim of acquiring as much information as possible on the many aspects that regulate it.
The cold chain is a focal point for vaccine distribution
The first doses of anti-Covid vaccines, produced by American and European pharmaceutical companies, should be released onto the market very soon. Despite the still very small quantities, they are being urgently requested by countries all over the world, in order to beat the pandemic and avoid further lockdowns which are already playing havoc with the global economy.
Considering that in order for them to remain effective, these vaccines must be stored at extremely low temperatures (around -70 °C, the cold chain must be perfectly organised and efficient, in order to deliver the doses all over the world without any issues.
Although everything possible is being done to resolve the various difficulties connected with this process, a specific type of IT piracy is now spreading, focused increasingly on companies involved in the development and distribution of the vaccines, also including firms that are indirectly involved, such as those that provide solar panels to power refrigeration systems used during intercontinental transport.
How information is gathered by IT pirates
According to IT security experts, the level of strength shown by cyber-criminals in the attack on Warp Speed (the US program for vaccine distribution) is extremely worrying.
The main technique used to gather sensitive data is phishing, using false email accounts, which has now been finely honed by criminals. These email messages have already been sent to various firms specialised in vaccine production, distribution and logistics.
IT pirates assumed the identities of directors and representatives from various companies working in the cold chain sector, expressing an interest in collaborating on vaccine distribution. Inside the carefully prepared emails, there is a link which, once clicked upon, downloads malicious software.
Why the cold chain attack is a clever move
It may seem strange that IT pirates have focused specifically on the cold chain. However, those who planned this attack have been extremely clever and they realise that attacking this network means gaining access to an enormous quantity of confidential data regarding the companies involved.
The pharmaceutical and healthcare sectors have become the hackers’ preferred targets in the last few years. This is because, in those sectors, the disclosure of certain information can cause huge financial damage.
Gaining possession of certain data signifies having very powerful leverage to force companies to pay what can be extremely high ransoms. The overwhelming request for the Covid vaccines is therefore much too attractive an opportunity for cyber-criminals to ignore.
Firms specialising in cyber security are warning firms who could be potential targets of attacks, working to improve awareness about phishing and suggesting additional security measures to be adopted. Considering that worldwide vaccine distribution is already in a very delicate phase, it is essential to eliminate any further complications before they arise.
Translated by Joanne Beckwith
