Hackers target WHO as coronavirus spread surges

Attacks on the organisation have dramatically increased since a pandemic was declared

The World Health Organisation (WHO) revealed it had been the target of an unsuccessful hacking attempt that occurred at the start of March, as the coronavirus went from outbreak to pandemic.

The organisation's CISO, Flavia Aggio, told Reuters that it wasn't clear who had attempted to breach the WHO's security, but hacking attempts against the agency and its partners have doubled since the outbreak. 

This latest attempt was first spotted by Alexander Urbelis, a cyber security expert and attorney with New York-based Blackstone Law Group. Urbeils had been following a group of hackers and spotted a malicious site mimicking the WHO's internal email system around 13 March. 

Urbelis couldn't confirm who was behind the attack, but another unnamed source told Reuters they suspected an elite group known as DarkHotel. 

There is very little detail on DarkHotel, but according to Securelist it's been operating since at least 2007 and has an alarming success rate with phishing campaigns.

The timing of this latest attack could not come at a worse time for the WHO, as COVID-19 spreads around the world, but this is just one of a number of attempts to breach its security.

"Criminals are disguising themselves as WHO to steal money or sensitive information," the organisation wrote in a blog post. "If you are contacted by a person or organisation that appears to be from WHO, verify their authenticity before responding.

"The only call for donations WHO has issued is the COVID-19 Solidarity Response Fund, which is linked to below. Any other appeal for funding or donations that appears to be from WHO is a scam." 

Despite the global pandemic, cyber criminals are showing no ethical boundaries and will continue to attack wherever there could be a vulnerability, according to cyber security expert Jake Moore. 

"What the cyber security industry needs to do now is come together and support each other," he said. "There is no better time to work collaboratively and share best practice. If the WHO is taken down, this pandemic could last longer than it needs to, so it is vital to help protect this organisation from attack."

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

What is hacktivism?
hacking

What is hacktivism?

13 Oct 2020
Microsoft: Iranian hackers are exploiting ZeroLogon flaw
Security

Microsoft: Iranian hackers are exploiting ZeroLogon flaw

6 Oct 2020
The Ritz suffers data breach after hackers pose as staff
data breaches

The Ritz suffers data breach after hackers pose as staff

17 Aug 2020
Russia hacked Liam Fox's personal email to steal trade documents
phishing

Russia hacked Liam Fox's personal email to steal trade documents

4 Aug 2020

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
iPhone 12 lineup official with A14 Bionic chip and 5G support
Mobile Phones

iPhone 12 lineup official with A14 Bionic chip and 5G support

13 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020