News of the Cyber World

[kyonides]

COVID-19 hacking extends to supply chain for controlling vaccine temperature

https://www.cyberscoop.com/coronavirus-v...cking-ibm/

IBM researchers on Thursday revealed a global spearphishing campaign they said was aimed at companies involved in the storage and transport of vaccines in temperature-controlled environments. Those controls allow the medicine to be sent to far-flung places. IBM suspects the attackers are tied to a government, but they said they didn’t have enough evidence to determine which one.
The attackers’ goal may have been to steal login credentials from those companies in order to gain future access “to corporate networks and sensitive information relating to the COVID-19 vaccine distribution.
The phishing campaign uncovered by IBM began in September and has targeted organizations in six countries in Europe and Asia. All of the organizations appear to be associated with a supply-chain program run by Gavi, an international organization that handles vaccines.

And how exactly did they fool their targets?

That cover saw the hackers pose as an executive at Haier Biomedical, a supplier involved in Gavi’s vaccine supply-chain program, and send phishing emails to companies supporting transportation needs for the program. China-based Haier touts itself as “the world’s only complete cold chain provider,” or organization that offers the full range of temperatures needed for storing biomedical equipment.

So they let you think they don't know what state is sponsoring this hackers but they pretend to be executives of Haier, a Chinese company...

Ransomware attack may delay scheduled procedures at Baltimore-area medical center

https://www.cyberscoop.com/ransomware-at...al-center/

Greater Baltimore Medical Center on Sunday became the latest U.S. hospital to grapple with a ransomware incident.
The ransomware attack caused “many of our [IT] systems” to go down, the 342-bed medical center said in a statement late Sunday. That means some patient procedures scheduled for Monday “may be affected,” GBMC said.

The Towson, Maryland-based medical center is following a playbook that numerous hospitals across the country have exercised after having their computer systems hampered by ransomware.

Well, Wulfo, you might need to think it twice before getting hurt or feeling sick.