Chinese hackers target Indian vaccine makers SII and Bharat Biotech, says security firm

Published March 1, 2021
A man rides his motorcycle past a parked bus of Indian biotechnology company Bharat Biotech outside its office in Hyderabad, India. — Reuters/File
A man rides his motorcycle past a parked bus of Indian biotechnology company Bharat Biotech outside its office in Hyderabad, India. — Reuters/File

A Chinese state-backed hacking group has in recent weeks targeted the IT systems of two Indian vaccine makers whose coronavirus shots are being used in the country’s immunisation campaign, cyber-intelligence firm Cyfirma told Reuters.

China and India, both rivals, have sold or gifted Covid-19 shots to many countries. India produces more than 60 per cent of all vaccines sold in the world.

Goldman Sachs-backed Cyfirma, based in Singapore and Tokyo, said Chinese hacking group APT10, also known as Stone Panda, had identified gaps and vulnerabilities in the IT infrastructure and supply chain software of Bharat Biotech and the Serum Institute of India (SII), the world’s largest vaccine maker.

“The real motivation here is actually exfiltrating intellectual property and getting competitive advantage over Indian pharmaceutical companies,” said Cyfirma Chief Executive Kumar Ritesh, formerly a top cyber-official with British foreign intelligence agency MI6.

He said APT10 was actively targeting SII, which is making the AstraZeneca vaccine for many countries and will soon start bulk-manufacturing Novavax shots.

“In the case of Serum Institute, they have found a number of their public servers running weak web servers, these are vulnerable web servers,” Ritesh said, referring to the hackers.

“They have spoken about weak web application, they are also talking about weak content management system. It’s quite alarming.”

China’s foreign ministry did not reply to a request for comment.

SII and Bharat Biotech declined to comment. The office of the director-general of the state-run Indian Computer Emergency Response Team (CERT) said the matter had been handed to its operations director, SS Sarma.

Sarma told Reuters that CERT was a “legal agency and we can’t confirm this thing to media”.

Cyfirma said in a statement that it had informed CERT authorities and that they had acknowledged the threat.

“They checked and they came back,” Cyfirma said. “Our technical analysis and evaluation verified the threats and attacks.”

The US Department of Justice said in 2018 that APT10 had acted in association with the Chinese Ministry of State Security.

Microsoft said in November that it had detected cyberattacks from Russia and North Korea targeting Covid-19 vaccine companies in India, Canada, France, South Korea and the United States. North Korean hackers also tried to break into the systems of British drugmaker AstraZeneca, Reuters has reported.

Ritesh, whose firm follows the activities of some 750 cyber criminals and monitors nearly 2,000 hacking campaigns using a tool called DeCYFIR, said it was not yet clear what vaccine-related information APT10 may have accessed from the Indian companies.

Bharat Biotech’s Covaxin shot, developed with the state-run Indian Council of Medical Research, will be exported to many countries, including Brazil.

US drugmaker Pfizer Inc and its German partner BioNTech SE said in December that documents related to development of their Covid-19 vaccine had been “unlawfully accessed” in a cyberattack on Europe’s medicines regulator.

Relations between nuclear-armed neighbours China and India soured last June when 20 Indian and four Chinese soldiers were killed in a Himalayan border fight. Recent talks have eased tension.

Opinion

New engagement
Updated 19 Apr 2021

New engagement

Better Pak-India ties mean a better regional outcome.
Inequality and ideology
19 Apr 2021

Inequality and ideology

Hunger and want, and the constant reminder of inequality,may condition religious mobilisation, but they are not solely sufficient.
Ties of sentiment
19 Apr 2021

Ties of sentiment

Pakistan-UK relations have been remarkably stable and increasingly energised by the Pakistani diaspora.

Editorial

19 Apr 2021

Vaccine shortfall

THE hope that the slew of Covid-19 vaccinations approved for use since the end of last year would vanquish the ...
Another package
Updated 19 Apr 2021

Another package

Sindh has not seen much development worth the name during the PPP’s more than decade-long rule in the province.
19 Apr 2021

Cricket triumph

TEAM Pakistan have a number of reasons to rejoice after their 3-1 T20 series win over hosts South Africa on Friday....
18 Apr 2021

More cabinet changes

PRIME MINISTER Imran Khan has reshuffled his cabinet yet again in what is obviously another attempt to shore up his...
Blocking social media
Updated 18 Apr 2021

Blocking social media

FOR four hours this week, all social media platforms in the country were shut down, a measure the government said ...
18 Apr 2021

Peasant rights in Sindh

IN a seminar held in Nawabshah recently, the Sindh Human Rights Commission and Hari Welfare Association reiterated a...