Report: Hackers target organizations included in popular coronavirus conspiracy theories

Hackers leaked thousands of email addresses and passwords from organizations supposedly involved in coronavirus coverups

Data on screen, viewed by shadowy hacker

According to the Search for International Terrorist Entities (SITE) Intelligence Group, hackers are responsible for leaking thousands of email addresses and passwords from the National Institutes of Health (NIH), the Centers for Disease Control and Prevention (CDC), the Bill and Melinda Gates Foundation, the World Health Organization (WHO), the World Bank and the Wuhan Institute of Virology. All told, the leak included nearly 25,000 employees' email addresses and login credentials and targeted organizations at the center of many coronavirus conspiracy theories.

While Pastebin initially listed the user credentials, the same materials were later shared to 4chan and Twitter. The leaked information was also posted to far-right extremist channels on Telegram. 

Of the leak’s targets, it appears that the NIH took the brunt of it with upward nearly 10,000 accounts leaked. Others weren’t far behind, though, as the CDC had 6,857 accounts leaked, World Bank had 5,120 accounts leaked, and the WHO had 2,732 accounts leaked. 

Although SITE has yet to verify origins of the leak, The Washington Post reports Australian cybersecurity expert Robert Potter was able to verify the leaked WHO email addresses and passwords. In fact, Potter was even able to use the leaked email addresses and passwords to gain access to WHO’s computer systems.

Rita Katz, SITE’s executive director, shared with the Washington Post, “Neo-Nazis and white supremacists capitalized on the lists and published them aggressively across their venues. Using the data, far-right extremists were calling for a harassment campaign while sharing conspiracy theories about the coronavirus pandemic. The distribution of these alleged email credentials were just another part of a months-long initiative across the far right to weaponize the COVID-19 pandemic.”

The WHO has seen the number of cyberattacks against it increase since the onset of the coronavirus. Seeing as the targets of this hack are in some ways included in coronavirus conspiracy theories, SITE suggestings this leak was intended to harass staff members and retrieve sensitive information related to the coronavirus pandemic.

Featured Resources

Digital document processes in 2020: A spotlight on Western Europe

The shift from best practice to business necessity

Download now

Four security considerations for cloud migration

The good, the bad, and the ugly of cloud computing

Download now

VR leads the way in manufacturing

How VR is digitally transforming our world

Download now

Deeper than digital

Top-performing modern enterprises show why more perfect software is fundamental to success

Download now

Recommended

What is hacktivism?
hacking

What is hacktivism?

13 Oct 2020
Microsoft: Iranian hackers are exploiting ZeroLogon flaw
Security

Microsoft: Iranian hackers are exploiting ZeroLogon flaw

6 Oct 2020
The Ritz suffers data breach after hackers pose as staff
data breaches

The Ritz suffers data breach after hackers pose as staff

17 Aug 2020
Russia hacked Liam Fox's personal email to steal trade documents
phishing

Russia hacked Liam Fox's personal email to steal trade documents

4 Aug 2020

Most Popular

The top 12 password-cracking techniques used by hackers
Security

The top 12 password-cracking techniques used by hackers

5 Oct 2020
iPhone 12 lineup official with A14 Bionic chip and 5G support
Mobile Phones

iPhone 12 lineup official with A14 Bionic chip and 5G support

13 Oct 2020
Google blocked record-breaking 2.5Tbps DDoS attack in 2017
Security

Google blocked record-breaking 2.5Tbps DDoS attack in 2017

19 Oct 2020