The Reality is Everyone Hacks… Everyone

Eugene Kaspersky, the founder and chief executive of the world-famous cybersecurity firm that also bears his surname, has said that when it comes to state-sponsored hacking, espionage and propaganda, no country should be presumed innocent.

Since the alleged cyber-sabotage operation last year against victims including the Democratic National Committee (DNC), Hillary Clinton and John Podesta, which many claim to be linked to the Russian government, news of state-backed hacking has firmly hit the mainstream.

Many headlines went straight for the term 'election hacking'. However, according to Kaspersky, it is misinformation and propaganda that are more likely shape the outcome of any future cyber-war.

"The reality is that everyone hacks everyone," he recently said.
"I agree with the Americans that elections are critical infrastructure because the future of the country depends on that," he added. "Of course they don't want someone else to manipulate their future, as we in Russia don't want someone else to manipulate our future."

So what does the term "election hacking" mean to Kaspersky, if anything?
"There are several aspects," he explained. "First, what happened with the Democratic Party, stealing the information and releasing the information, I don't think it really damaged the reputation of the party, maybe it influenced the election outcome, but just a little.

"The second thing is the information war, the propaganda, which is not really new, but now it's in cyberspace and in cyberspace it's much easier to manipulate someone's opinion. It's easier to stay in the shadows, anonymous. It's much cheaper.

"Third, attacks on the computer systems which collect the votes. I don't know if it's possible in the UK because I don't know how it's designed, but in Russia they are partly going back to paper for remote voting - they don't trust cyber any-more."
According to Kaspersky, who spoke to IBTimes UK on 28 April at The Savoy, London, it's not only governments that are shaped by the notion that democracy is increasingly molded by the online world, but also voters. "The new generation, they don't want to vote offline," Kaspersky said.

The Kaspersky Lab chief executive indicated that with the rise of smart-phones and web-connected devices, the default expectation is now that an online option should always exist, even in the voting booth. While this is expected, he stressed than digital voting is not the answer, at least not yet.

"If you don't have 100% secure online voting it will be the end of democracy," he warned.
Over the years, Kaspersky Lab has been on the frontlines of both cyber-crime and anti-virus protection, now boasting over 400 million global users. It also regularly releases technical analysis on both cybercrime groups and state-sponsored hacking teams.

Yet despite this breadth of expertise, its founder said attribution in cyberspace remains "very tricky."
"The most spoken languages in espionage are native English, native Russian, and simplified Chinese, he explained. "We don't have the data to investigate [the biggest groups]. If they are stupid then we can, if they leave fingerprints. For professional gangs it's very hard."

In any case, his teams routinely work with law enforcement around the world to takedown cybercrime groups, one of the most famous of which was the "Lurk" gang which targeted banks. Sometimes, in the face of the odds, Kaspersky said some research still piques his experts' interest.

"When we did the research on the Bangladesh Central Bank one of my best experts spent three months to prove it was not North Korea and as a result he proved it was North Korea," he laughed. "It's not 100% proof, but there are many little finger-prints which were not completely erased."

While the sheer amount of online threats has never been greater, the cybersecurity pioneer said he believes that many humans are still a bigger problem than the devices they use. 

"How many incidents are caused by the human factor?" he asked rhetorically. "Homo-sapiens are much more dangerous than computers."

IB Times

You Might Also Read:

Russian Cyber Spies & Hackers Are The New Normal:

Wikileaks Vault 7 And The CIA Hacking Arsenal:

Kaspersky Lab Employee Arrested On Treason Charges:

 


 

« Facebook Pays For Fake News Ads In UK Press
Global C4ISR Has A Cyber Warfare Surge »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Homeland Security Investigations (HSI)

Homeland Security Investigations (HSI)

Homeland Security Investigations (HSI) is a premier federal law enforcement agency within the Department of Homeland Security (DHS).

Applicure Technologies

Applicure Technologies

Applicure Technologies develops the leading multi-platform web application security software products to protect web sites and web applications from external and internal attacks.

Secure Thingz

Secure Thingz

Secure Thingz focus on developing and delivering advanced security solutions into the emerging Industrial Internet of Things (IIoT) and Critical Infrastructure markets.

PFP Cybersecurity

PFP Cybersecurity

PFP provides a SaaS solution for life-cycle protection based on our IoT security platform and power usage analytics.

Ionic Security

Ionic Security

Ionic provide a high-assurance data protection and control platform built on strong encryption, fine-grain control and contextual analytics.

maCERT

maCERT

maCERT is the national Computer Emergency Response Team for Morocco.

AVG Technologies

AVG Technologies

AVG is focused on providing home and business computer users with the most comprehensive and proactive protection against computer security threats.

Cyber 2.0

Cyber 2.0

Cyber 2.0 is the only system in the world that blocks all forms of cyber attack within the organization, including new and unfamiliar attack methods.

TES

TES

TES is a provider of IT Lifecycle Services, offering bespoke solutions that help customers manage the commissioning, deployment and retirement of Information Technology assets.

Human Security

Human Security

Human (formerly White Ops) Bot Mitigation Platform enables complete protection from sophisticated bot attacks across advertising, marketing and cybersecurity.

Etonwood

Etonwood

Etonwood specialises in infrastructure and vendor technology recruitment in areas including cloud platforms, cyber security and service management.

senhasegura

senhasegura

senhasegura is a global Privileged Access Management vendor. Our mission is to eliminate privilege abuse in organizations around the globe and build digital sovereignty.

Antigen Security

Antigen Security

Antigen Security is a Digital Forensics, Incident Response and Recovery Engineering firm helping businesses and service providers prepare for, respond to, and recover from cyber threats.

IT Voice

IT Voice

IT Voice specializes in Managed IT and VoIP solutions. Our focus is simplifying the technology so our customers can stay focused on what they do best.

CIP Cyber

CIP Cyber

CIP Cyber is an online learning community with a mission of connecting, training, and certifying cybersecurity professionals to protect critical infrastructure.

Night Lion Security

Night Lion Security

Night Lion Security provides discreet and bespoke investigation and incident response recovery services.