Grappling with COVID-Themed Cyber Attacks: Pharmaceutical Sector

This CloudSEK report outlines a rise in COVID-19-themed cyber attacks targeting pharmaceutical companies and regulators worldwide—detailing ransomware incidents (e.g., Dr. Reddy’s, Lupin), supply-chain and Winnti-related malware activity (Blackfly/Winnti), and data access incidents at EMA/BioNTech—attributing campaigns to state-linked groups (China, Russia, North Korea) and describing common TTPs such as password-spray, brute-force, and spear-phishing; it recommends asset identification, segregation, intrusion detection, and threat intelligence/vulnerability alerting.