Elite Hackers Target WHO As Coronavirus Cyberattacks Spike

According to Reuters, elite hackers tried to break into the World Health Organization earlier this month. While the effort was unsuccessful, the agency said there's been a more than two-fold increase in cyberattacks as they battle to contain the coronavirus. From the report: The attempted break-in at the WHO was first flagged to Reuters by Alexander Urbelis, a cybersecurity expert and attorney with the New York-based Blackstone Law Group, which tracks suspicious internet domain registration activity. Urbelis said he picked up on the activity around March 13, when a group of hackers he'd been following activated a malicious site mimicking the WHO's internal email system. "I realized quite quickly that this was a live attack on the World Health Organization in the midst of a pandemic," he said.

Urbelis said he didn't know who was responsible, but two other sources briefed on the matter said they suspected an advanced group of hackers known as DarkHotel, which has been conducting cyber-espionage operations since at least 2007. When asked by Reuters about the incident, the WHO's Security Officer Flavio Aggio confirmed that the site spotted by Urbelis had been used in an attempt to steal passwords from multiple agency staffers. Cybersecurity firms including Romania's Bitdefender and Moscow-based Kaspersky said they have traced many of DarkHotel's operations to East Asia - an area that has been particularly affected by the coronavirus. Specific targets have included government employees and business executives in places such as China, North Korea, Japan, and the United States. Costin Raiu, head of global research and analysis at Kaspersky, could not confirm that DarkHotel was responsible for the WHO attack but said the same malicious web infrastructure had also been used to target other healthcare and humanitarian organizations in recent weeks.

Read more of this story at Slashdot.