The Stage Is Set For Cyber War

Forget the past. The future of war suddenly presents itself with great razzmatazz. Two consecutive ransomware attacks, ‘WannaCry’ and ‘GoldenEye’, shook the world with such ferocious force that it was evident, they were intended to attract only attention.

The noisy and noticeable activity was not meant for stealing money only but to shout out a certain kind of presence in the cyber sphere.

After that with every new computer installation the hardware people are now coming up with a warning, please don’t use pirated or back dated Windows operating system. Forget and forgive their naivety. The hacker’s target is no longer the singular person.

A new war front has opened up. Nation states have become the target now. Not persons. In the recent past generally, the hardware people happily install old Windows operating system without any caveat, of course. What happened to them? Why are they so scared?

The recent consecutive ransomware attacks that affected thousands of individuals and organisations worldwide suddenly changed the whole postulated sequences of possible events and our mindset.

First ‘WannaCry’, and then ‘GoldenEye’ has changed it permanently. In May, it had been deliberately done by the hackers to extort money by locking the personal or organisational computer and networks.

With ‘WannaCry’ virus hackers were successful in their mission. No one had been arrested. As ransom, more than one hundred thousand dollar had been deposited by the affected. The money was put into the designated account through Bitcoin, the mysterious digital currency used in dark web. And it’s unbelievable, they didn’t touch the money.

Actually, it was not money. It was something else they had wanted to prove!

In June we saw the ‘GoldenEye’ also known as  'Petya / Not Petya' attacks after which Russia’s largest oil production company, Rosneft and Denmark-based Maersk, the largest shipping company in the world, had to shut down several of its systems. New Jersey-based Merck, one of the largest pharmaceutical companies in the world, was also hit by a massive hack. The list had been endless since then!

GoldenEye / Petya did just like what the WannaCry ransomware had done. It hit in May and locked up more than 200,000 computers across the globe. And, only forty-four days after WannaCry had hit GoldenEye surfaced to stare us down. In May, the origin of the attack had been one Ukrainian company from which it spread through Russia, Western Europe and the US.

But if you wanted to dig deep, you’d have found more gruesome reality. All the hell broke loose after the Shadow Brokers hacker group leaked US National Security Agency exploits in April.

After that cyber-criminal launched a much more dangerous and sophisticated weapon. Until then they had not been given a giant net to head out to sea. Now they have. And the cyber war has unofficially been declared against American cyber-invasion with their leaked weapon.

WannaCry and GoldenEye serve just as prelude. By this time, you will have heard the term, Ransomware; so you are not going to ask your hardware people why you’re not supposed to install backdated or pirated Windows operating system. You’ve also probably heard the breaking news, how the hackers gained the backdoor to each affected system that was running backdated or pirated Windows. The maker of Windows, Microsoft, has categorically warned about the potential risk of running old versions.

They are asking people to avoid the old versions to which they had stopped giving security patches and updates. It was amazing to learn this fact: many giant corporations and government institutions used to run old Windows-based operating system happily without any update or security patches so far.

It sounded like science fiction when we had first come to know about Ransomware. But it was, actually, an old tactic. It changed a little bit in a practical sense but in the actual sense this professional wrongdoing had been tormenting people for long until it was publicised recently with humongous noise.

We’ve probably forgotten about the Canada’s Carlton University affair. In the middle of last year, a graduate student of Canada’s Carlton University emailed CBC news service and let them know a ghastly plan of cyber attack. At that time experts believed it could sweep over the web world, quite disturbingly, and might be a trend setter in the near future.

The Carlton University, later, confirmed its IT network was attacked by ‘RANSOMWARE’, a type of computer virus that had used encryption to hold essential files hostage. They were told that they could get back ‘very important’ access to their files in exchange of money.

It was conditional. They were supposed to buy their freedom! They had to pay them in Bitcoin — a digital currency known only in the ‘dark web’ and difficult to trace. The attackers wanted 39 Bitcoin in total, amounting to almost US$39 thousand holding tons of important research and official papers as a hostage. Their message was clear: ‘get back your all-important files, get back your freedom by paying us a ransom’.

University authority took some drastic steps immediately after they had got the ransom call from the ‘cyber kidnappers.’ Students and employees were warned that any Windows-based system accessible from the main network might have been compromised. Students were told to refrain from using Windows system and shut down their computers expecting more damages. It took one more day to get back to normalcy, but that was partial. Only email service had been restored after one day.

In June of 2016, when University of Calgary was first attacked by a same type of assault, people didn’t take notice. The University paid 20 thousand dollars to regain access to their computers. Within a few months the same incident of Ransomware attack happened and it indicated that the trend might soon turn into a more sinister bend.

At that time security people guessed after testing the first blood in Education sector cyber kidnappers might now target government and banking system, social media giants, and corporate sectors which needed to handle important data on-line. It might hack from daily transport system to individual locking systems. Even it could make you hostage inside your room, car or even in the public toilet where WI-FI was available.

Now it happened exactly before our eyes. It has been proved by this time that cyber attackers can swoop on any computer network and lock the essential files encrypting them and demand for a ransom that you have to pay in Bitcoin, a digital currency that runs on the dark web.

Denial of service, an old and classical tactic hackers deployed before to jam one network, has been morphed into a new avatar presently. Your service has been denied this time but in a new, complex and encrypted way. And you are being asked to pay a ransom this time, around three hundred dollar, to get back your access to your essential files.

The real life kidnapping model has just morphed into a new avatar in the virtual world encrypting your essential files, demanding money, holding you as a hostage. Cyber criminals have now adopted the same ‘real-life’ kidnapping technique to snatch your valuable documents holding you for a hostage to make a deal. In such situations, you need to buy your freedom for the exchange of a ransom.

Will they strike back again with more ransom demand? This question is pertinent but this time security people don’t bother about it. More sinister plot waits in a condition of biological rest as they guess. These attacks are just dormant buds. And that is the real danger. Why? The payment infrastructure hackers used in this attack was rudimentary. And it was in contrast with their advanced hacking technical knowledge.

This fact is worrying. Why it’s so? It’s because the computer virus was camouflaged to look like the infamous Petya ransomware but it had an extremely poor payment pipeline. There was a single hard-coded BTC wallet and the instructions required only sending an email with a huge amount of complex strings.

Expert computer criminals would not have done that definitely. Because they knew from the very beginning that within hours the email address would be disabled by the service provider. And exactly that happened.

Ein News

You Might Also Read:

N. Korea Threatens The World With Cyberwarfare - Not Nuclear Missiles:

US Steps Up Its Cyberwar Capability:

 

« Stolen Nude Photos & Hacked Defibrillators: Is This The Future Of Ransomware?
US Police Make Widespread Use Of Facial Recognition Software »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Bricata

Bricata

Bricata offers industry-leading IPS solutions for enterprise-wide threat prevention and unparalleled situational awareness.

Copenhagen FinTech

Copenhagen FinTech

Copenhagen FinTech is a centre for R&D and innovation in the Danish finance IT sector. Focus areas include cyber security and payments platforms.

Foresite

Foresite

Foresite is a global service provider, delivering a range of managed security and consulting solutions.

Global Security Network (GSN)

Global Security Network (GSN)

GSN focuses on specialized IT Security solutions & services for the military, law enforcement, critical infrastructure and oil & gas sectors in the Middle East.

Cingo Solutions

Cingo Solutions

Cingo Solutions is a Managed Detection & Response company providing specialized data security services.

Strategic Cyber Ventures (SCV)

Strategic Cyber Ventures (SCV)

SCV grow cybersecurity companies that disrupt advanced cyber adversaries and revolutionize the cyber product marketplace.

Scythe

Scythe

SCYTHE is a next generation red team platform for continuous and realistic enterprise risk assessments.

Wontok

Wontok

Wontok deliver innovative value-added data security services that fill the gaps left in traditional security solutions.

General Informatics

General Informatics

General Informatics is a team of technology enthusiasts with one mission: to make our clients even more successful through the best use of technology.

Nasuni

Nasuni

The Nasuni File Data Platform offers the protection, detection, and recovery of file shares from ransomware attacks or random disasters within minutes.

Training.com.au

Training.com.au

Training.com.au is a comparison website through which those looking to learn about different aspects of cyber security can compare learning courses from training providers from across Australia.

NetApp

NetApp

The NetApp portfolio includes intelligent cloud services, data services, and storage infrastructure that helps organizations manage applications and data everywhere across hybrid cloud environments.

Bastion Technologies

Bastion Technologies

All your cyber defense. One platform. Keep your business assets and employees safe under one roof. Manage your cyber defense quickly, easily & efficiently.

Axient

Axient

Axient advances defense and civilian missions from aerospace to cyberspace with multi-domain test and analysis, mission engineering and operations, and advanced technologies.

CipherStash

CipherStash

CipherStash is a complete data governance and breach prevention platform.

LOCH Technologies

LOCH Technologies

LOCH Wireless Machine Vision platform delivers next generation cybersecurity, performance monitoring, and cost management for all 5G and for broad-spectrum IoT, IoMT and OT wireless environments.