Security News > 2021 > April > Phishing attack ramps up against COVID-19 vaccine supply chain

In a new report, X-Force said it recently discovered a series of phishing emails targeting 44 companies across 14 countries, all involved in the coronavirus vaccine cold chain, an aspect of the overall supply chain that ensures the safety of vaccines transported and stored in cold environments.
Seen last September, the phishing campaign deploys emails spoofing a business executive from Haier Biomedical, a legitimate member company of the COVID-19 vaccine supply chain and reportedly the world's only complete cold chain provider.
Lance Whitney: Why are cybercriminals interested in disrupting the COVID-19 vaccine supply chain?
Mike Puglia: Cybercriminals are motivated to disrupt the vaccine supply chain for the same reason that motivates most cybercrime: money.
Lance Whitney: Are there aspects of the vaccine supply chain that are most vulnerable? If so, what are the largest vulnerabilities?
Lance Whitney: What can organizations that are part of the vaccine supply chain do to prevent a cyberattack? What can they do to mitigate the damage if they are attacked?
News URL
Related news
- Phishing platform 'Lucid' behind wave of iOS, Android SMS attacks (source)
- Recent GitHub supply chain attack traced to leaked SpotBugs token (source)
- SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack (source)
- That massive GitHub supply chain attack? It all started with a stolen SpotBugs token (source)
- iOS devices face twice the phishing attacks of Android (source)
- Windows NTLM hash leak flaw exploited in phishing attacks on governments (source)
- Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack (source)
- Three Reasons Why the Browser is Best for Stopping Phishing Attacks (source)
- Phishing detection is broken: Why most attacks feel like a zero day (source)
- DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack (source)