Here's the full advisory <a href="https://www.ncsc.gov.uk/files/Advisory-APT29-targets-COVID-19-vaccine-development.pdf" rel="nofollow">https://www.ncsc.gov.uk/files/Advisory-APT29-targets-COVID-1...</a>
As long as they only spy without actually disrupting the whole process, I don't really perceive it as a bad action from the ethical point of view. Legally, of course, it's a completely different issue.