Increased foreign threat to COVID-19 research prompts extraordinary warning from Canada's spy agencies

Canada's spy agencies are warning that Canadian intellectual property linked to the pandemic is a "valuable target" for state-sponsored actors just a day after U.S. intelligence agencies warned of China-backed hacking of institutions and companies researching vaccines, treatments and testsfor the novelcoronavirus.

"The Communications Security Establishment has assessed that it is near certain that state-sponsored actors have shifted their focus during the pandemic and that Canadian intellectual property represents a valuable target," reads a rare joint statement from the Communications Security Establishment (CSE),Canada's foreign signals intelligence agency, and the Canadian Security Intelligence Service (CSIS).

"With regards to the specific threats, the Cyber Centre has assessed that the COVID-19 pandemic presents an elevated level of risk to the cyber security of Canadian health organizations involved in the national response to the COVID-19 pandemic."

'Foreign interference and espionage'

CSISreported"an increased risk of foreign interference and espionagedue to the extraordinary effort of our businesses and research centres."

"As a result, CSIS is working with these organizations to ensure that their work and proprietary information remains safely in their control. Its focus is on protecting Canadian intellectual property from these threats and jobs and economic interests with it."

The statement doesn't name the state actors suspected of posing a threat and neitheragency would saywhether they've witnessed specific attacks.

The warning comes a day after the FBI and the Cybersecurity and Infrastructure Security Agency in the U.S.publicly accused China of targetingU.S. organizations runningCOVID-19-related research.

"The United States condemns attempts by cyber actors and non-traditional collectors affiliated with the People's Republic of China (PRC) to steal U.S. intellectual property and data related to COVID-19 research," said Secretary of State Mike Pompeo in a statement today.

"The potential theft of this information jeopardizes the delivery of secure, effectiveand efficient treatment options."

The joint statement from the Canadian intelligence agencies follows an alert the CSE put out in March warning about potential online attacks against the Canadian health sector, including research facilities.

"These actors may attempt to gain intelligence on COVID-19 response efforts and potential political responses to the crisis or to steal ongoing key research towards a vaccine or other medical remedies," it warned.

Scott Jones, head of the CSE's Cyber Centre, cautioned at the time that those sophisticated threat actors could target Canadian medical research labsworking on vaccinesor other remedies through manipulation orspear-phishing campaigns or by going after critical vulnerabilities as more houseboundemployees connect with their workplaces through VPNs(virtual private networks).

Jones said intellectual property theft through stealing or corrupting data generated byCanadian researchers is a"lower probability"threat but one that would be "very high impact."

"We're saying, 'OK this is a time to maintain vigilance, because you will be targeted,'" he said during a March interview.

Working with Five Eyes allies

While today's statement doesn't mention specific state actors, it does point outthat both agencies work closely with the Five Eyes intelligence-sharing alliance, which includesthe United States.

"We regularly share information with our partners, including the U.S., which has a significant impact on protecting our respective countries' safety and security," says the statement.

The Cyber Centre said it also regularly sharesthreat informationwith health care and research sectors, provincial and territorial governments.

In today'sstatement, the CSE stressed that most of the malicious threat activity it has seen during the pandemic period has been criminal in nature.