governmentbacked hackers are attacking healthcare and research institutions in an effort to steal valuable information about efforts to contain the new coronavirus outbreak britain and the united states said in a joint warning in a statement britains national cyber security centre ncsc and the us cybersecurity and infrastructure security agency cisa said the hackers had targeted pharmaceutical companies research organisations and local governments the ncsc and cisa did not say which countries were responsible for the attacks but one us official and one uk official said the warning was in response to intrusion attempts by suspected chinese and iranian hackers as well as some russianlinked activity the two officials spoke on condition of anonymity to discuss nonpublic details of the alert tehran beijing and moscow have all repeatedly denied conducting offensive cyber operations and say they are the victims of such attacks themselves state hacking groups frequently target organisations in order to collect bulk personal information intellectual property and intelligence that aligns with national priorities the ncsc and cisa said for example actors may seek to obtain intelligence on national and international healthcare policy or acquire sensitive data on covid19 related research the warning follows efforts by a host of statebacked hackers to compromise governments businesses and health agencies in search of information about the new disease and attempts to combat it reuters has reported in recent weeks that vietnamlinked hackers targeted the chinese government over its handling of the coronavirus outbreak and that multiple groups some with ties to iran tried to break into the world health organization the officials said the alert was not triggered by any specific incident or compromise but rather intended as a warning both to the attackers and the targeted organisations that need to better defend themselves these are organisation that wouldnt normally see themselves as nation state targets and they need to understand that now they are said one of the officials the agencies said hackers had been seen trying to identify and exploit security weaknesses caused by staff working from home as a result of the coronavirus outbreak in other incidents the attackers repeatedly tried to compromise accounts with a series of common and frequentlyused passwords a technique known as password spraying its no surprise that bad actors are doing bad things right now in particular targeting organizations supporting covid19 response efforts a cisa spokesman said were seeing them use a variety of tried and true techniques to gain access to accounts and compromise credentials