HC3 Threat Brief TLP White: COVID-19 Related Nation-State and Cyber Criminal Targeting of the Healthcare Sector

APT groups are using the COVID-19 pandemic as part of their cyber operations:

• Masquerade as trusted entities
• Use coronavirus-themed phishing messages or malicious applications
• Their goals and targets are consistent with long-standing priorities such as espionage and “hack-
   and-leak” operations.

Cybercriminals are using the pandemic for commercial gain, deploying a variety of ransomware
and other malware.