UN Panel of Experts S/2021/777
Cyberattacks against pharmaceutical companies developing COVID-19 vaccines
Para 155: “The Panel also continues to investigate the evasion by the Democratic People’s Republic of Korea of sanctions through cybermeans by illegally acquiring economic assets through the theft of intellectual property. According to reports from cybersecurity firms and media reports, persistent threat actors known to be associated with the Democratic People’s Republic of Korea conducted cyberattacks against pharmaceutical companies developing COVID-19 vaccines. The Panel corroborated these activities with Member States and notes that the tactics, techniques and procedures of the attacks match previously reported cyberattacks carried out by Democratic People’s Republic of Korea actors such as Lazarus. One pharmaceutical company told the Panel that the potential impact of the threat was significant, but no evidence was found to indicate that the threat actor had been successful.” (footnote 95: Reuters, “North Korea-linked hackers targeted J&J, Novavax in hunt for COVID research”, 2 December 2020)