In a joint statement, the General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD) said the hackers attempt to trick users into revealing security verification and PIN codes during chats initiated by the attackers.

The agencies said the tactic allows hackers to take control of personal accounts and gain access to private conversations and group chats.

“The Russian hackers have likely gained access to sensitive information,” the agencies said, adding that some victims include Dutch government employees and journalists.

Encrypted messaging platforms are widely used by officials to share confidential information, making them attractive targets for cyber espionage.

Investigators said the attackers frequently pose as a Signal Support chatbot, persuading users to share authentication codes. Another method involves exploiting the app’s “linked devices” feature to gain access to accounts.

Authorities warned that duplicated contacts or numbers appearing as “deleted account” in contact lists could signal that an account has been compromised.

Dutch authorities have issued a cyber advisory to government employees and are offering support to mitigate the threat.

Peter Reesink, director of the MIVD, said that despite strong encryption, messaging apps should not be used to share classified or highly sensitive information.

The post Dutch Intelligence Warns of Russian-Backed Hackers Targeting Signal and WhatsApp Accounts appeared first on Tech Digest News.

TECH DIGEST – IBM is sounding the alarm over hackers targeting companies critical to the distribution of COVID-19 vaccines, a sign that digital spies are turning their attention to the complex logistical work involved in inoculating the world’s population against the novel coronavirus.

The information technology company said in a blog post published on Thursday that it had uncovered “a global phishing campaign” focused on organizations associated with the COVID-19 vaccine “cold chain” — the process needed to keep vaccine doses at extremely cold temperatures as they travel from manufacturers to people’s arms.

The U.S. Cybersecurity and Infrastructure Security Agency reposted the report, warning members of Operation Warp Speed — the U.S. government’s national vaccine mission — to be on the lookout.

Understanding how to build a secure cold chain is fundamental to distributing vaccines developed by the likes of Pfizer Inc. and BioNTech SE because the shots need to be stored at –70 C or below to avoid spoiling.

IBM’s cybersecurity unit said it had detected an advanced group of hackers working to gather information about different aspects of the cold chain, using meticulously crafted booby-trapped emails sent in the name of an executive with Haier Biomedical, a Chinese cold chain provider that specializes in vaccine transport and biological sample storage.

The hackers went through “an exceptional amount of effort,” said IBM analyst Claire Zaboeva, who helped draft the report. Hackers researched the correct make, model and pricing of various Haier refrigeration units, Zaboeva said.

“Whoever put together this campaign was intimately aware of whatever products were involved in the supply chain to deliver a vaccine for a global pandemic,” she said.

Haier Medical did not return messages seeking comment.

Messages sent to the email addresses used by the hackers were not returned.

IBM said the bogus Haier emails were sent to around 10 different organizations but only identified one target by name: the European Commission’s Directorate-General for Taxation and Customs Union, which handles tax and customs issues across the EU and has helped set rules on the import of vaccines.

Representatives for the directorate-general could not immediately be reached for comment.

IBM said other targets included companies involved in the manufacture of solar panels, which are used to power vaccine refrigerators in warm countries, and petrochemical products that could be used to derive dry ice.

Who is behind the vaccine supply chain espionage campaign isn’t clear.

Reuters has previously documented how hackers linked to Iran, Vietnam, North Korea, South Korea, China, and Russia have on separate occasions been accused by cybersecurity experts or government officials of trying to steal information about the virus and its potential treatments.

IBM’s Zaboeva said there was no shortage of potential suspects. Figuring out how to swiftly distribute an economy-saving vaccine “should be topping the lists of nation states across the world,” she said.

Last month, Microsoft said it had detected mostly unsuccessful attempts by state-backed Russian and North Korean hackers to steal data from leading pharmaceutical companies and vaccine researchers. It gave no information on how many succeeded or how serious those breaches were. Chinese state-backed hackers have also targeted vaccine makers, the U.S. government said in announcing criminal charges in July.

Microsoft said most of the targets — located in Canada, France, India, South Korea and the United States — were researching vaccines and COVID-19 treatments.

The post IBM Raises Alarm over Cyber Attacks Targeting COVID-19 Vaccine Distribution appeared first on Tech Digest News.