{"id":34022,"date":"2020-03-25T13:11:12","date_gmt":"2020-03-25T13:11:12","guid":{"rendered":"http:\/\/9a4cd71e-b955-4d2e-aa71-8b3541cf64e9"},"modified":"2020-03-25T13:11:12","modified_gmt":"2020-03-25T13:11:12","slug":"coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/","title":{"rendered":"Coronavirus lockdown may have disrupted this global hacking campaign"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/zdnet2.cbsistatic.com\/hub\/i\/r\/2018\/07\/25\/61403dac-8632-454f-a4a5-d61fe1ab373d\/thumbnail\/770x578\/24f921a4ff4a16777aec6b1484802302\/istock-silly-hacker-hands.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>A prolific state-backed Chinese cyber espionage operation started 2020 with one of its largest hacking campaigns \u2013 even though the&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/effective-strategies-and-tools-for-remote-work-during-coronavirus\/\">coronavirus lockdown<\/a> in China appeared to have an impact on the group&#8217;s output.<\/p>\n<p>The global operation by hacking group APT 41 \u2013 widely believed to linked to the Chinese government \u2013 targeted businesses in telecoms, manufacturing, healthcare, defence, higher education, pharmaceuticals, banking, media, oil and gas, chemicals, plus government.<\/p>\n<p>Campaigns by APT 41 are often deployed in an effort to steal intellectual property \u2013 and there are some indications that the attacks are used to deploy <a href=\"https:\/\/www.zdnet.com\/article\/cyber-espionage-warning-the-most-advanced-hacking-groups-are-getting-more-ambitious\/\" target=\"_blank\" rel=\"noopener noreferrer\">general espionage<\/a> and surveillance on target networks.<\/p>\n<p>APT 41&#8217;s latest campaign started in January and continued through to March and has been <a href=\"https:\/\/www.fireeye.com\/blog\/threat-research\/2020\/03\/apt41-initiates-global-intrusion-campaign-using-multiple-exploits.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">discovered and detailed by researchers at cybersecurity company FireEye<\/a>, who describe it as &#8220;one of the broadest campaigns by a Chinese espionage actor we have observed in recent years&#8221;.<\/p>\n<p>The group&#8217;s latest hacking campaign attempted to exploit recently uncovered vulnerabilities in Citrix Netscaler, Cisco routers and Zoho ManageEngine Desktop Central.<\/p>\n<p>Researchers first observed activity around this campaign on January 20 as attackers attempted to exploit Citrix Application Delivery Controller (ADC) and Citrix Gateway devices, both of which <a href=\"https:\/\/www.zdnet.com\/article\/this-critical-citrix-netscaler-bug-could-affect-80000-companies\/\">are widely used and were revealed to contain a critical vulnerability (<\/a><a href=\"https:\/\/www.zdnet.com\/article\/this-critical-citrix-netscaler-bug-could-affect-80000-companies\/\">CVE-2019-19781) in December<\/a>.<\/p>\n<p><strong><strong>SEE:&nbsp;<\/strong><\/strong><a href=\"https:\/\/www.zdnet.com\/topic\/cybersecurity-lets-get-tactical\/\"><strong><strong>Cybersecurity: Let&#8217;s get tactical<\/strong><\/strong><\/a><strong><strong>&nbsp;(ZDNet\/TechRepublic special feature) |&nbsp;<\/strong><\/strong><a href=\"https:\/\/www.techrepublic.com\/resource-library\/whitepapers\/cybersecurity-let-s-get-tactical-free-pdf\/?ftag=CMG-01-10aaa1b\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\"><strong><strong>Download the free PDF version<\/strong><\/strong><\/a><strong><strong>&nbsp;(TechRepublic)&nbsp;<\/strong><\/strong><\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p><a href=\"https:\/\/www.zdnet.com\/article\/citrix-these-are-new-patches-for-your-vulnerable-servers\/\">While a patch was released<\/a>, those who didn&#8217;t apply it remained vulnerable to attacks and that&#8217;s something hackers looked to quickly exploit for their own gain before an apparent lull in activity between January 23 and February 1. Researchers attribute this break to Chinese New Year \u2013 a period where state-backed hacking activity out of the country regularly drops.<\/p>\n<p>But there was also no trace of hacking activity between February 2 and February 19; researchers note that this coincides with <a href=\"https:\/\/www.zdnet.com\/article\/how-to-track-the-coronavirus-dashboard-delivers-real-time-view-of-the-deadly-virus\/\">coronavirus lockdown and quarantine measures<\/a> implemented across several Chinese regions as the government attempted to prevent spread of COVID-19.<\/p>\n<p>It could simply be the case that those employed to perform hacking activity on behalf of the Chinese state simply couldn&#8217;t get to work in that time \u2013 and didn&#8217;t have the capability to do it remotely.<\/p>\n<p>However, activity resumed activity after February 19 and by the 24th and 25th, there was a huge rise in attempts to exploit CVE-2019-19781, with the attacks identical to those before the lockdown dates.<\/p>\n<p>&#8220;We did not observe APT41 activity at FireEye customers between February 2 and February 19, 2020. China initiated COVID-19 related quarantines in cities in Hubei province starting on January 23 and January 24, and rolled out quarantines to additional provinces starting between February 2 and February 10. While it is possible that this reduction in activity might be related to the COVID-19 quarantine measures in China, APT41 may have remained active in other ways, which we were unable to observe with FireEye telemetry,&#8221; the security company said.<\/p>\n<p>This coincided with APT 41 adding another attack to the campaign \u2013 targeting Cisco RV320 routers <a href=\"https:\/\/www.zdnet.com\/article\/hackers-are-going-after-cisco-rv320rv325-routers-using-a-new-exploit\/\">by using a proof-of-concept exploit which first appeared on GitHub<\/a>. Researchers note that this tactic managed to breach the network of at least one telecommunications provider, providing the attackers with the ability to execute remote code on the target machine.<\/p>\n<p>Shortly afterwards, researchers noted that the APT 41 attacks were attempting to exploit another vulnerability; this time is was a <a href=\"https:\/\/www.zdnet.com\/article\/zoho-zero-day-published-on-twitter\/\">zero-day remote code execution in Zoho ManageEngine Desktop Central<\/a> (CVE-2020-10189). The attackers used it to target at least a dozen organisations and successfully gained access to the networks of five.<\/p>\n<p>The last recorded activity of this particular campaign was March 11, but it&#8217;s likely only a matter of time before APT 41 is once again attempting to compromise the networks of organisations around the world for the purposes of cyber espionage. <a href=\"https:\/\/www.zdnet.com\/article\/chinese-cyber-spies-are-stealing-money-from-video-game-firms-on-the-side\/\">It&#8217;s also known for APT 41 operatives to conduct their own hacking campaigns on the side to supplement their earnings<\/a>.<\/p>\n<p>All three vulnerabilities have been patched to prevent hackers from taking advantage and <a href=\"https:\/\/www.zdnet.com\/article\/cybersecurity-how-to-get-your-software-patching-strategy-right-and-keep-the-hackers-at-bay\/\">it&#8217;s important that organisations apply these updates to protect their networks from unauthorised access<\/a>, whether from nation-state backed hacking groups, or cyber criminal crews \u2013 and to apply the patches as quickly as possible.<\/p>\n<p>&#8220;APT41 continues to be one of the most prolific threats that FireEye currently tracks in 2020. This new activity from this group shows how resourceful and how quickly this group can leverage newly disclosed vulnerabilities to their advantage,&#8221; said cybersecurity researchers at FireEye.<\/p>\n<p><strong>READ MORE ON CYBERSECURITY<\/strong><\/p>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>State-backed hacking group APT41 exploited vulnerabilities in Citrix Netscaler, Cisco routers and Zoho ManageEngine Desktop Central. But a COVID-19 lockdown may have slowed their efforts.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":34023,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-34022","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-25T13:11:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Coronavirus lockdown may have disrupted this global hacking campaign\",\"datePublished\":\"2020-03-25T13:11:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/\"},\"wordCount\":742,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/\",\"name\":\"Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg\",\"datePublished\":\"2020-03-25T13:11:12+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Coronavirus lockdown may have disrupted this global hacking campaign\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/","og_locale":"en_US","og_type":"article","og_title":"Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-03-25T13:11:12+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Coronavirus lockdown may have disrupted this global hacking campaign","datePublished":"2020-03-25T13:11:12+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/"},"wordCount":742,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/","url":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/","name":"Coronavirus lockdown may have disrupted this global hacking campaign 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg","datePublished":"2020-03-25T13:11:12+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/03\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign.jpg","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/coronavirus-lockdown-may-have-disrupted-this-global-hacking-campaign\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Coronavirus lockdown may have disrupted this global hacking campaign"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34022","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=34022"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/34022\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/34023"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=34022"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=34022"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=34022"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}