The Stage Is Set For Cyber War

Forget the past. The future of war suddenly presents itself with great razzmatazz. Two consecutive ransomware attacks, ‘WannaCry’ and ‘GoldenEye’, shook the world with such ferocious force that it was evident, they were intended to attract only attention.

The noisy and noticeable activity was not meant for stealing money only but to shout out a certain kind of presence in the cyber sphere.

After that with every new computer installation the hardware people are now coming up with a warning, please don’t use pirated or back dated Windows operating system. Forget and forgive their naivety. The hacker’s target is no longer the singular person.

A new war front has opened up. Nation states have become the target now. Not persons. In the recent past generally, the hardware people happily install old Windows operating system without any caveat, of course. What happened to them? Why are they so scared?

The recent consecutive ransomware attacks that affected thousands of individuals and organisations worldwide suddenly changed the whole postulated sequences of possible events and our mindset.

First ‘WannaCry’, and then ‘GoldenEye’ has changed it permanently. In May, it had been deliberately done by the hackers to extort money by locking the personal or organisational computer and networks.

With ‘WannaCry’ virus hackers were successful in their mission. No one had been arrested. As ransom, more than one hundred thousand dollar had been deposited by the affected. The money was put into the designated account through Bitcoin, the mysterious digital currency used in dark web. And it’s unbelievable, they didn’t touch the money.

Actually, it was not money. It was something else they had wanted to prove!

In June we saw the ‘GoldenEye’ also known as  'Petya / Not Petya' attacks after which Russia’s largest oil production company, Rosneft and Denmark-based Maersk, the largest shipping company in the world, had to shut down several of its systems. New Jersey-based Merck, one of the largest pharmaceutical companies in the world, was also hit by a massive hack. The list had been endless since then!

GoldenEye / Petya did just like what the WannaCry ransomware had done. It hit in May and locked up more than 200,000 computers across the globe. And, only forty-four days after WannaCry had hit GoldenEye surfaced to stare us down. In May, the origin of the attack had been one Ukrainian company from which it spread through Russia, Western Europe and the US.

But if you wanted to dig deep, you’d have found more gruesome reality. All the hell broke loose after the Shadow Brokers hacker group leaked US National Security Agency exploits in April.

After that cyber-criminal launched a much more dangerous and sophisticated weapon. Until then they had not been given a giant net to head out to sea. Now they have. And the cyber war has unofficially been declared against American cyber-invasion with their leaked weapon.

WannaCry and GoldenEye serve just as prelude. By this time, you will have heard the term, Ransomware; so you are not going to ask your hardware people why you’re not supposed to install backdated or pirated Windows operating system. You’ve also probably heard the breaking news, how the hackers gained the backdoor to each affected system that was running backdated or pirated Windows. The maker of Windows, Microsoft, has categorically warned about the potential risk of running old versions.

They are asking people to avoid the old versions to which they had stopped giving security patches and updates. It was amazing to learn this fact: many giant corporations and government institutions used to run old Windows-based operating system happily without any update or security patches so far.

It sounded like science fiction when we had first come to know about Ransomware. But it was, actually, an old tactic. It changed a little bit in a practical sense but in the actual sense this professional wrongdoing had been tormenting people for long until it was publicised recently with humongous noise.

We’ve probably forgotten about the Canada’s Carlton University affair. In the middle of last year, a graduate student of Canada’s Carlton University emailed CBC news service and let them know a ghastly plan of cyber attack. At that time experts believed it could sweep over the web world, quite disturbingly, and might be a trend setter in the near future.

The Carlton University, later, confirmed its IT network was attacked by ‘RANSOMWARE’, a type of computer virus that had used encryption to hold essential files hostage. They were told that they could get back ‘very important’ access to their files in exchange of money.

It was conditional. They were supposed to buy their freedom! They had to pay them in Bitcoin — a digital currency known only in the ‘dark web’ and difficult to trace. The attackers wanted 39 Bitcoin in total, amounting to almost US$39 thousand holding tons of important research and official papers as a hostage. Their message was clear: ‘get back your all-important files, get back your freedom by paying us a ransom’.

University authority took some drastic steps immediately after they had got the ransom call from the ‘cyber kidnappers.’ Students and employees were warned that any Windows-based system accessible from the main network might have been compromised. Students were told to refrain from using Windows system and shut down their computers expecting more damages. It took one more day to get back to normalcy, but that was partial. Only email service had been restored after one day.

In June of 2016, when University of Calgary was first attacked by a same type of assault, people didn’t take notice. The University paid 20 thousand dollars to regain access to their computers. Within a few months the same incident of Ransomware attack happened and it indicated that the trend might soon turn into a more sinister bend.

At that time security people guessed after testing the first blood in Education sector cyber kidnappers might now target government and banking system, social media giants, and corporate sectors which needed to handle important data on-line. It might hack from daily transport system to individual locking systems. Even it could make you hostage inside your room, car or even in the public toilet where WI-FI was available.

Now it happened exactly before our eyes. It has been proved by this time that cyber attackers can swoop on any computer network and lock the essential files encrypting them and demand for a ransom that you have to pay in Bitcoin, a digital currency that runs on the dark web.

Denial of service, an old and classical tactic hackers deployed before to jam one network, has been morphed into a new avatar presently. Your service has been denied this time but in a new, complex and encrypted way. And you are being asked to pay a ransom this time, around three hundred dollar, to get back your access to your essential files.

The real life kidnapping model has just morphed into a new avatar in the virtual world encrypting your essential files, demanding money, holding you as a hostage. Cyber criminals have now adopted the same ‘real-life’ kidnapping technique to snatch your valuable documents holding you for a hostage to make a deal. In such situations, you need to buy your freedom for the exchange of a ransom.

Will they strike back again with more ransom demand? This question is pertinent but this time security people don’t bother about it. More sinister plot waits in a condition of biological rest as they guess. These attacks are just dormant buds. And that is the real danger. Why? The payment infrastructure hackers used in this attack was rudimentary. And it was in contrast with their advanced hacking technical knowledge.

This fact is worrying. Why it’s so? It’s because the computer virus was camouflaged to look like the infamous Petya ransomware but it had an extremely poor payment pipeline. There was a single hard-coded BTC wallet and the instructions required only sending an email with a huge amount of complex strings.

Expert computer criminals would not have done that definitely. Because they knew from the very beginning that within hours the email address would be disabled by the service provider. And exactly that happened.

Ein News

You Might Also Read:

N. Korea Threatens The World With Cyberwarfare - Not Nuclear Missiles:

US Steps Up Its Cyberwar Capability:

 

« Stolen Nude Photos & Hacked Defibrillators: Is This The Future Of Ransomware?
US Police Make Widespread Use Of Facial Recognition Software »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Assure Technical

Assure Technical

Assure Technical offers a holistic approach to Technical Security. Our expertise and services span across the Physical, Cyber and Counter Surveillance domains.

Itaccel

Itaccel

IT Accel began a decade ago as a band of technical recruiters who wanted to bring our experience and depth of knowledge to solving complex human resou

ODVA

ODVA

ODVA is a global trade and standards development organization whose members comprise the world’s leading industrial automation companies.

Center for Strategic Cyberspace & International Studies (CSCIS)

Center for Strategic Cyberspace & International Studies (CSCIS)

CSCIS seeks to advance global cyberspace security and prosperity by providing strategic insights for cyberspace and policy solutions to decision makers.

Skurio

Skurio

Skurio create cost-effective, intuitive and powerful Cloud based solutions to identify threats, detect data breaches outside the network and automate the response.

Swiss Cyber Storm

Swiss Cyber Storm

Swiss Cyber Storm is a non profit organization hosting the international Swiss Cyber Storm Conference and running the Swiss part of the European Cyber Security Challenges.

Evidence Talks Ltd

Evidence Talks Ltd

A leading forensic computing authority developing unique digital forensic technologies. Tools that detect potential terrorists & criminals & used by the military, enforcement & intelligence commmunity

LightEdge Solutions

LightEdge Solutions

LightEdge’s highly-trained compliance and security experts take the guesswork out of keeping your business protected.

CyberSecJobs.com

CyberSecJobs.com

CyberSecJobs.com is a career site and job fair company providing services and resources to the cyber security community.

National Institute for Research & Development in Informatics (ICI Bucharest)

National Institute for Research & Development in Informatics (ICI Bucharest)

ICI Bucharest is the most important institute in the field of research, development and innovation in information and communication technology (ICT) in Romania.

Intaso

Intaso

Intaso are a boutique head hunting and talent solution firm with specialist Cyber and Information Security expertise.

InfoSec Brigade

InfoSec Brigade

InfoSec Brigade offers a suite of specialized solutions that help businesses to mitigate risk by integrating cyber and IT security protocols with business goals.

CypherEye

CypherEye

CypherEye is a next generation trust platform that advances the current state of Multi-factor Authentication (MFA) to enable highly secure, private and auditable cyber-transactions.

Diverto

Diverto

Diverto is a company that provides a high level of information security to companies, institutions and other organisations in an information-centric world.

E-CQURITY (ECQ)

E-CQURITY (ECQ)

ECQ is a network security company offering offensive security services and solutions focused on active offensive and defensive positioning.

Xcede

Xcede

Xcede are global technology recruitment specialists. We connect companies with exceptional professionals who empower growth.