{"id":38189,"date":"2020-11-13T14:00:00","date_gmt":"2020-11-13T14:00:00","guid":{"rendered":"http:\/\/1551c06c-dccc-4781-9e10-48163af882fd"},"modified":"2020-11-13T14:00:00","modified_gmt":"2020-11-13T14:00:00","slug":"microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/","title":{"rendered":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers"},"content":{"rendered":"<figure class=\"image image-original shortcode-image\"><span class=\"img aspect-set \"><img decoding=\"async\" src=\"https:\/\/zdnet2.cbsistatic.com\/hub\/i\/2020\/11\/13\/09997770-9aa4-4714-8882-b96f4c276a96\/covid-10-vaccine-syringe.jpg\" class alt=\"covid-10-vaccine-syringe.jpg\"><\/span><figcaption><span class=\"caption\"><\/span><span class=\"credit\"> Image: Emin Baycan <\/span><\/figcaption><\/figure>\n<p>Microsoft says it detected three state-sponsored hacking operations (also known as&nbsp;<a href=\"https:\/\/en.wikipedia.org\/wiki\/Advanced_persistent_threat\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">APTs<\/a>) that have launched cyber-attacks on at least seven prominent companies involved in COVID-19 vaccines research and treatments. <\/p>\n<div class=\"relatedContent alignRight\" readability=\"8.0321285140562\">\n<h3 class=\"heading\"> <span class=\"int\">Special feature<\/span> <\/h3>\n<div class=\"thumb\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> <span class=\"img \"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2016\/09\/01\/fa215859-76c8-4ab7-8b55-56a42e0d8950\/resize\/220x165\/cf651a47272fd8abf79b87f4b45ba3c4\/09-2016-special-feature-cover-art.jpg\" class alt=\"Cyberwar and the Future of Cybersecurity\" height=\"165\" width=\"220\"><\/span> <\/a> <\/div>\n<p class=\"title\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\"> Cyberwar and the Future of Cybersecurity <\/a> <\/p>\n<p class=\"dek\">Today&#8217;s security threats have expanded in scope and seriousness. There can now be millions &#8212; or even billions &#8212; of dollars at risk when information security isn&#8217;t handled properly.<\/p>\n<p class=\"read-more\"> <a href=\"https:\/\/www.zdnet.com\/topic\/cyberwar-and-the-future-of-cybersecurity\/\" data-omniture-track=\"moduleClick\" data-omniture-track-data=\"{&quot;moduleInfo&quot;: &quot;pinbox&quot;, &quot;pageType&quot;: &quot;article&quot;}\" data-vanity-rewritten=\"true\">Read More<\/a> <\/p>\n<\/p><\/div>\n<p>Microsoft traced the attacks back to one threat actor in Russia and two North Korean hacking groups. <\/p>\n<p>Known as&nbsp;<a href=\"https:\/\/malpedia.caad.fkie.fraunhofer.de\/actor\/sofacy\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Strontium<\/a>&nbsp;(aka Fancy Bear, APT28), the Russian group has employed password spraying and brute-force login attempts to obtain login credentials, break into victim accounts, and steal sensitive information. <\/p>\n<p>The first North Korean group, known as&nbsp;<a href=\"https:\/\/malpedia.caad.fkie.fraunhofer.de\/actor\/lazarus_group\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Zinc<\/a>&nbsp;(or the Lazarus Group), has primarily relied on spear-phishing email campaigns by sending messages with fabricated job descriptions, pretending to be recruiters, and targeting employees working at the targeted companies. <\/p>\n<p>The second North Korean threat actor, known as Cerium, appears to be a new group. Microsoft says Cerium engaged in spear-phishing attacks with email lures using Covid-19 themes while pretending to be representatives from the World Health Organization. <\/p>\n<p>Microsoft says these attacks targeted vaccine makers that have COVID-19 vaccines in various stages of clinical trials, a clinical research organization involved in trials, and one that developed a COVID-19 test. <\/p>\n<p>The companies were located in Canada, France, India, South Korea, and the United States, according to Microsoft. <\/p>\n<h3> A call to the international community <\/h3>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_zd_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\"> <\/section>\n<p>These attacks represent just the latest in a long line of incidents that have targeted healthcare organizations during one of the most trying times in recent years. While healthcare organizations have been dealing with one of the most widespread pandemics in recent decades, hacking groups have taken advantage of the global crisis to increase their activity, sometimes targeting the organizations that were supposed to help fight this pandemic. <\/p>\n<p>Instead of focusing on providing care to patients, hospitals have had to deal with ransomware attacks \u2014 such as those in the&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/uhs-hospital-network-hit-by-ransomware-attack\/\" target=\"_blank\" rel=\"noopener noreferrer\">US<\/a>,&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/first-death-reported-following-a-ransomware-attack-on-a-german-hospital\/\" target=\"_blank\" rel=\"noopener noreferrer\">Germany<\/a>, the&nbsp;<a href=\"https:\/\/www.zdnet.com\/article\/czech-hospital-hit-by-cyber-attack-while-in-the-midst-of-a-covid-19-outbreak\/\" target=\"_blank\" rel=\"noopener noreferrer\">Czech Republic<\/a>,&nbsp;<a href=\"https:\/\/murciatoday.com\/cyber_attack_threatens_spanish_hospital_computer_systems_1367723-a.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Spain<\/a>, or&nbsp;<a href=\"https:\/\/www.reuters.com\/article\/us-thailand-hospital-ransomware-idUSKBN2611WV\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Thailand<\/a>. <\/p>\n<p>Instead of focusing on researching a vaccine or treatment plan, pharma companies have had to deal with intrusions into their networks \u2014 such as&nbsp;<a href=\"https:\/\/www.reuters.com\/article\/us-health-coronavirus-moderna-cyber-excl\/exclusive-chinese-backed-hackers-targeted-covid-19-vaccine-firm-moderna-idUSKCN24V38M\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Moderna<\/a>,&nbsp;<a href=\"https:\/\/www.bbc.com\/news\/technology-54642870\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Dr.Reddy<\/a>, or&nbsp;<a href=\"https:\/\/www.businesstoday.in\/sectors\/pharma\/lupin-hit-by-cyberattack-threat-increases-for-pharma-firms-amid-covid-19\/story\/421348.html\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Lupin<\/a>. <\/p>\n<p>Across the summer, several organizations, like the&nbsp;<a href=\"https:\/\/www.elac.ox.ac.uk\/the-oxford-statement-on-the-international-law-protections-against-cyber-operations-targeting-the-hea\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">Oxford Institute for Ethics, Law and Armed Conflict<\/a>, and&nbsp;<a href=\"https:\/\/cyberpeaceinstitute.org\/blog\/2020-05-26-world-leaders-call-on-governments-to-stop-cyberattacks-plaguing-healthcare-systems\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">the CyberPeace Institute<\/a>, have made calls to the world&#8217;s governments to protect healthcare organizations against hackers. <\/p>\n<p>The organizations asked governments to agree on regulation, rules, and principles to prevent attacks from taking place or punish those that take part in targeting the healthcare orgs, citing the universal human rights law&nbsp;<a href=\"https:\/\/blogs.icrc.org\/law-and-policy\/2020\/04\/02\/cyber-attacks-hospitals-covid-19\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" data-component=\"externalLink\">as the basis<\/a>&nbsp;for creating a no-cyber-attack zone around the health sector <\/p>\n<p>Today, Microsoft President Brad Smith, plans to make a similar call to the world&#8217;s leaders at the virtual Paris Peace Forum. <\/p>\n<p>&#8220;Microsoft is calling on the world&#8217;s leaders to affirm that international law protects healthcare facilities and to take action to enforce the law,&#8221; said today Tom Burt, Microsoft Vice President for Customer Security &amp; Trust, in a <a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2020\/11\/13\/health-care-cyberattacks-covid-19-paris-peace-forum\/\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">blog post<\/a> on Microsoft&#8217;s website. <\/p>\n<p>&#8220;We believe the law should be enforced not just when attacks originate from government agencies but also when they originate from criminal groups that governments enable to operate\u2013or even facilitate \u2013within their borders.&#8221; <\/p>\n<h3> Uphill battle <\/h3>\n<p>But experts in international politics don&#8217;t believe these types of calls will ever lead to any progress in establishing international norms prohibiting attacks on healthcare, or any other sector. <\/p>\n<p>&#8220;In my opinion, there is no chance in hell that these calls and statements will create enough political pressure to force governments around the world to fulfill their due diligence in cyberspace,&#8221;&nbsp;<a href=\"https:\/\/twitter.com\/iiyonite\" target=\"_blank\" rel=\"noopener noreferrer\" data-component=\"externalLink\">Stefan Soesanto<\/a>, Senior Cyber Defence Researcher at the Center for Security Studies at the Swiss Federal Institute of Technology (ETH) in Zurich, told ZDNet today. <\/p>\n<p>&#8220;Most governments actually don&#8217;t have the capacity and capability to do so, other government simply don&#8217;t care, and probably a fraction of governments actually welcome this activity when it doesn&#8217;t happen within their territory,&#8221; Soesanto added. <\/p>\n<p>&#8220;There is probably also a very strong strategic and tactical incentive to prevent the establishment of a no-cyber attack zone altogether. Because once it is established in the health sector, then other critical infrastructure sectors will follow. In the end, everything will be normatively deemed untouchable. <\/p>\n<p>&#8220;Also, if we look at the state of cybersecurity within the healthcare sector \u2014which is dismay both in the US and Europe\u2014, these normative calls and statements seem to be an attempt to push the problem of IT security onto ransomware groups and APT abroad. (i.e., &#8216;if they don&#8217;t target us than we will be fine&#8217;),&#8221; Soesanto said. <\/p>\n<p>&#8220;I think that logic is inherently flawed and even dangerous because then hospitals and research institutes lose all accountability for their own security posture and failures.&#8221; <\/p>\n<p> READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The three state-sponsored hacker groups (APTs) are Russia&#8217;s Strontium (Fancy Bear) and North Korea&#8217;s Zinc (Lazarus Group) and Cerium.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":38190,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-38189","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-11-13T14:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Microsoft says three APTs have targeted seven COVID-19 vaccine makers\",\"datePublished\":\"2020-11-13T14:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/\"},\"wordCount\":845,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/\",\"name\":\"Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg\",\"datePublished\":\"2020-11-13T14:00:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/11\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg\",\"width\":\"1000\",\"height\":\"500\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft says three APTs have targeted seven COVID-19 vaccine makers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-11-13T14:00:00+00:00","og_image":[{"width":1000,"height":500,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers","datePublished":"2020-11-13T14:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/"},"wordCount":845,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/","url":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/","name":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg","datePublished":"2020-11-13T14:00:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/11\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers.jpg","width":"1000","height":"500"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-says-three-apts-have-targeted-seven-covid-19-vaccine-makers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft says three APTs have targeted seven COVID-19 vaccine makers"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=38189"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38189\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/38190"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=38189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=38189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=38189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}