IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Hackers leak credentials of WHO and Gates Foundation employees

Cyber criminals posted almost 25,000 email addresses and passwords to 4chan and Pastebin

Almost 25,000 email addresses and passwords allegedly belonging to employees of leading health organisations such as the World Health Organisation (WHO) and the US National Institutes of Health (NIH) have been leaked online in what is being described as a “harassment campaign”.

The news comes as WHO reported that it has been forced to double its security resources due to a significant increase in cyber attacks on the organisation since mid-March when the coronavirus moved up to pandemic status.

Director of SITE Intelligence Group Rita Katz told the Washington Post that “Neo-Nazis and white supremacists capitalized on the lists and published them aggressively across their venues (...) calling for a harassment campaign while sharing conspiracy theories about the coronavirus pandemic”.

Other victims of the breach include the Centers for Disease Control and Prevention (CDC), the World Bank, the Gates Foundation and the Wuhan Institute of Virology, who all had their credentials posted to sites such as 4chan and Pastebin.

According to SITE, which was unable to verify whether the email addresses and passwords were authentic, the NIH was the hardest hit by the breach with 9,938 credentials posted online. The CDC had 6,857 credentials leaked, while the list of WHO email addresses and passwords totalled 2,732.

The Gates Foundation and the Wuhan Institute of Virology lost 269 and 21 credentials respectively.

A spokesperson for the NIH said in a statement: “We are always working to ensure optimal cyber safety and security for NIH and take appropriate action to address threats or concerns."

Yvonne Eskenzi, founder of cybersecurity PR agency Eskenzi, told IT Pro that “it’s too early to say if these credentials are old or current”.

“It just highlights the constant and relentless attacks all companies are under but particularly right now the healthcare is seeing a barrage of attacks of ransomware and credential theft,” she said.

“The healthcare sector has the most valuable and sensitive data and we’ve learnt from our cybersecurity clients that the level of attacks has increased dramatically during the COVID-19 crisis, surpassing the financial sector who have always been the first port of call. This is a sickening and tragic development and shows that there are no depths to which the cybercriminals will stoop too.”

Last month, cyber criminals targeted hospitals across Europe in an effort to compromise their computer systems while healthcare workers deal with a dramatic influx of patients due to the coronavirus outbreak.

Featured Resources

The state of Salesforce: Future of business

Three articles that look forward into the changing state of Salesforce and the future of business

Free Download

The mighty struggle to migrate SAP to the cloud may be over

A simplified and unified approach to delivering Enterprise Transformation in the cloud

Free Download

The business value of the transformative mainframe

Modernising on the mainframe

Free Download

The Total Economic Impact™ Of IBM FlashSystem

Cost savings and business benefits enabled by FlashSystem

Free Download

Recommended

A new age of asset management
Active Directory

A new age of asset management

1 Jun 2022
Google rescinds mandatory vaccination policy for US staff
Business operations

Google rescinds mandatory vaccination policy for US staff

24 Feb 2022
How coronavirus has accelerated the digital transformation of Britain's public sector
public sector

How coronavirus has accelerated the digital transformation of Britain's public sector

28 Jan 2022
How to manage people successfully from a distance
Business strategy

How to manage people successfully from a distance

27 Oct 2021

Most Popular

How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
Samsung proposes 11 Texas semiconductor plants worth $191 billion
Hardware

Samsung proposes 11 Texas semiconductor plants worth $191 billion

21 Jul 2022
Should you take your password manager off the internet?
Sponsored

Should you take your password manager off the internet?

28 Jul 2022