Hackers target WHO as coronavirus spread surges

Attacks on the organisation have dramatically increased since a pandemic was declared

The World Health Organisation (WHO) revealed it had been the target of an unsuccessful hacking attempt that occurred at the start of March, as the coronavirus went from outbreak to pandemic.

The organisation's CISO, Flavia Aggio, told Reuters that it wasn't clear who had attempted to breach the WHO's security, but hacking attempts against the agency and its partners have doubled since the outbreak. 

Advertisement - Article continues below

This latest attempt was first spotted by Alexander Urbelis, a cyber security expert and attorney with New York-based Blackstone Law Group. Urbeils had been following a group of hackers and spotted a malicious site mimicking the WHO's internal email system around 13 March. 

Urbelis couldn't confirm who was behind the attack, but another unnamed source told Reuters they suspected an elite group known as DarkHotel. 

There is very little detail on DarkHotel, but according to Securelist it's been operating since at least 2007 and has an alarming success rate with phishing campaigns.

The timing of this latest attack could not come at a worse time for the WHO, as COVID-19 spreads around the world, but this is just one of a number of attempts to breach its security.

"Criminals are disguising themselves as WHO to steal money or sensitive information," the organisation wrote in a blog post. "If you are contacted by a person or organisation that appears to be from WHO, verify their authenticity before responding.

Advertisement - Article continues below
Advertisement - Article continues below

"The only call for donations WHO has issued is the COVID-19 Solidarity Response Fund, which is linked to below. Any other appeal for funding or donations that appears to be from WHO is a scam." 

Despite the global pandemic, cyber criminals are showing no ethical boundaries and will continue to attack wherever there could be a vulnerability, according to cyber security expert Jake Moore. 

"What the cyber security industry needs to do now is come together and support each other," he said. "There is no better time to work collaboratively and share best practice. If the WHO is taken down, this pandemic could last longer than it needs to, so it is vital to help protect this organisation from attack."

Featured Resources

The case for a marketing content hub

Transform your digital marketing to deliver customer expectations

Download now

Fast, flexible and compliant e-signatures for global businesses

Be at the forefront of digital transformation with electronic signatures

Download now

Why CEOS should care about the move to SAP S/4HANA

And how they can accelerate business value

Download now

IT faces new security challenges in the wake of COVID-19

Beat the crisis by learning how to secure your network

Download now



INKY announces $20M Series B funding round

4 Jun 2020

Microsoft issues warning about new PonyFinal ransomware attacks

3 Jun 2020
data breaches

Amtrak Guest Reward suffers a data breach

3 Jun 2020
cyber security

Brand-impersonation and form-based attacks are rising

3 Jun 2020

Most Popular


Ransomware collective claims to have hacked NASA IT contractor

3 Jun 2020

The UK looks to Japan and South Korea for 5G equipment

4 Jun 2020

How data science is transforming business

29 May 2020