The Stage Is Set For Cyber War

Forget the past. The future of war suddenly presents itself with great razzmatazz. Two consecutive ransomware attacks, ‘WannaCry’ and ‘GoldenEye’, shook the world with such ferocious force that it was evident, they were intended to attract only attention.

The noisy and noticeable activity was not meant for stealing money only but to shout out a certain kind of presence in the cyber sphere.

After that with every new computer installation the hardware people are now coming up with a warning, please don’t use pirated or back dated Windows operating system. Forget and forgive their naivety. The hacker’s target is no longer the singular person.

A new war front has opened up. Nation states have become the target now. Not persons. In the recent past generally, the hardware people happily install old Windows operating system without any caveat, of course. What happened to them? Why are they so scared?

The recent consecutive ransomware attacks that affected thousands of individuals and organisations worldwide suddenly changed the whole postulated sequences of possible events and our mindset.

First ‘WannaCry’, and then ‘GoldenEye’ has changed it permanently. In May, it had been deliberately done by the hackers to extort money by locking the personal or organisational computer and networks.

With ‘WannaCry’ virus hackers were successful in their mission. No one had been arrested. As ransom, more than one hundred thousand dollar had been deposited by the affected. The money was put into the designated account through Bitcoin, the mysterious digital currency used in dark web. And it’s unbelievable, they didn’t touch the money.

Actually, it was not money. It was something else they had wanted to prove!

In June we saw the ‘GoldenEye’ also known as  'Petya / Not Petya' attacks after which Russia’s largest oil production company, Rosneft and Denmark-based Maersk, the largest shipping company in the world, had to shut down several of its systems. New Jersey-based Merck, one of the largest pharmaceutical companies in the world, was also hit by a massive hack. The list had been endless since then!

GoldenEye / Petya did just like what the WannaCry ransomware had done. It hit in May and locked up more than 200,000 computers across the globe. And, only forty-four days after WannaCry had hit GoldenEye surfaced to stare us down. In May, the origin of the attack had been one Ukrainian company from which it spread through Russia, Western Europe and the US.

But if you wanted to dig deep, you’d have found more gruesome reality. All the hell broke loose after the Shadow Brokers hacker group leaked US National Security Agency exploits in April.

After that cyber-criminal launched a much more dangerous and sophisticated weapon. Until then they had not been given a giant net to head out to sea. Now they have. And the cyber war has unofficially been declared against American cyber-invasion with their leaked weapon.

WannaCry and GoldenEye serve just as prelude. By this time, you will have heard the term, Ransomware; so you are not going to ask your hardware people why you’re not supposed to install backdated or pirated Windows operating system. You’ve also probably heard the breaking news, how the hackers gained the backdoor to each affected system that was running backdated or pirated Windows. The maker of Windows, Microsoft, has categorically warned about the potential risk of running old versions.

They are asking people to avoid the old versions to which they had stopped giving security patches and updates. It was amazing to learn this fact: many giant corporations and government institutions used to run old Windows-based operating system happily without any update or security patches so far.

It sounded like science fiction when we had first come to know about Ransomware. But it was, actually, an old tactic. It changed a little bit in a practical sense but in the actual sense this professional wrongdoing had been tormenting people for long until it was publicised recently with humongous noise.

We’ve probably forgotten about the Canada’s Carlton University affair. In the middle of last year, a graduate student of Canada’s Carlton University emailed CBC news service and let them know a ghastly plan of cyber attack. At that time experts believed it could sweep over the web world, quite disturbingly, and might be a trend setter in the near future.

The Carlton University, later, confirmed its IT network was attacked by ‘RANSOMWARE’, a type of computer virus that had used encryption to hold essential files hostage. They were told that they could get back ‘very important’ access to their files in exchange of money.

It was conditional. They were supposed to buy their freedom! They had to pay them in Bitcoin — a digital currency known only in the ‘dark web’ and difficult to trace. The attackers wanted 39 Bitcoin in total, amounting to almost US$39 thousand holding tons of important research and official papers as a hostage. Their message was clear: ‘get back your all-important files, get back your freedom by paying us a ransom’.

University authority took some drastic steps immediately after they had got the ransom call from the ‘cyber kidnappers.’ Students and employees were warned that any Windows-based system accessible from the main network might have been compromised. Students were told to refrain from using Windows system and shut down their computers expecting more damages. It took one more day to get back to normalcy, but that was partial. Only email service had been restored after one day.

In June of 2016, when University of Calgary was first attacked by a same type of assault, people didn’t take notice. The University paid 20 thousand dollars to regain access to their computers. Within a few months the same incident of Ransomware attack happened and it indicated that the trend might soon turn into a more sinister bend.

At that time security people guessed after testing the first blood in Education sector cyber kidnappers might now target government and banking system, social media giants, and corporate sectors which needed to handle important data on-line. It might hack from daily transport system to individual locking systems. Even it could make you hostage inside your room, car or even in the public toilet where WI-FI was available.

Now it happened exactly before our eyes. It has been proved by this time that cyber attackers can swoop on any computer network and lock the essential files encrypting them and demand for a ransom that you have to pay in Bitcoin, a digital currency that runs on the dark web.

Denial of service, an old and classical tactic hackers deployed before to jam one network, has been morphed into a new avatar presently. Your service has been denied this time but in a new, complex and encrypted way. And you are being asked to pay a ransom this time, around three hundred dollar, to get back your access to your essential files.

The real life kidnapping model has just morphed into a new avatar in the virtual world encrypting your essential files, demanding money, holding you as a hostage. Cyber criminals have now adopted the same ‘real-life’ kidnapping technique to snatch your valuable documents holding you for a hostage to make a deal. In such situations, you need to buy your freedom for the exchange of a ransom.

Will they strike back again with more ransom demand? This question is pertinent but this time security people don’t bother about it. More sinister plot waits in a condition of biological rest as they guess. These attacks are just dormant buds. And that is the real danger. Why? The payment infrastructure hackers used in this attack was rudimentary. And it was in contrast with their advanced hacking technical knowledge.

This fact is worrying. Why it’s so? It’s because the computer virus was camouflaged to look like the infamous Petya ransomware but it had an extremely poor payment pipeline. There was a single hard-coded BTC wallet and the instructions required only sending an email with a huge amount of complex strings.

Expert computer criminals would not have done that definitely. Because they knew from the very beginning that within hours the email address would be disabled by the service provider. And exactly that happened.

Ein News

You Might Also Read:

N. Korea Threatens The World With Cyberwarfare - Not Nuclear Missiles:

US Steps Up Its Cyberwar Capability:

 

« Stolen Nude Photos & Hacked Defibrillators: Is This The Future Of Ransomware?
US Police Make Widespread Use Of Facial Recognition Software »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

The Networking People (TNP)

The Networking People (TNP)

TNP supplies independent advice allowing large organisations to design, build and operate their own networks independently of the established telecoms companies.

Law Enforcement Cyber Center (LECC)

Law Enforcement Cyber Center (LECC)

LECC is designed to assist police, digital forensic investigators, detectives, and prosecutors who are investigating and preventing crimes that involve technology.

Vade Secure

Vade Secure

Vade Secure provides protection against the most sophisticated email scams such as phishing and spear phishing, malware and ransomware.

Digital Arts

Digital Arts

Digital Arts provides internet security software and appliance products for companies and individuals.

Digi International

Digi International

Digi is a leading global provider of mission-critical and business-critical machine-to-machine (M2M) and Internet of Things (IoT) connectivity products and services.

Amadeus Capital Partners

Amadeus Capital Partners

Amadeus Capital Partners offers over 20 years’ experience in technology investment. Our areas of focus include AI & machine learning and cyber security.

Bleam Cyber Security

Bleam Cyber Security

Bleam is a leading provider of Managed Cyber Security Services and Information Security consulting. We deliver enterprise class security services to UK SME’s to stop data breaches.

ARIA Cybersecurity Solutions

ARIA Cybersecurity Solutions

The ARIA ADR Automatic Detection & Response solution was designed to find, verify, and stop all types of attacks - automatically and in real time.

Suridata

Suridata

Suridata’s SaaS Security platform enables organizations to secure the use of SaaS applications.

Appsian Security

Appsian Security

Appsian provides powerful solutions that help organizations take control of their business critical data and financial transactions.

Nemstar

Nemstar

Nemstar is a specialist in Information Security & Cyber Training with over 25 years' industry experience.

Iron Mountain

Iron Mountain

Iron Mountain Incorporated is a global business dedicated to storing, protecting and managing, information and assets.

CoGuard

CoGuard

CoGuard is a patented solution that uses AI driven automation to provide fast, cost effective white-box penetration testing, infrastructure audits and infrastructure design services.

UberEther

UberEther

UberEther are a dedicated group of software developers and consultants developing and deploying the next generation of identity management and cloud solutions.

CarbonHelix

CarbonHelix

CarbonHelix provides cybersecurity services from US-based security operations centers that meet the highest compliance requirements.

Hexagate

Hexagate

Hexagate is at the forefront of blockchain threat prevention and automated risk management, proactively detecting and mitigating threats to smart contracts and onchain assets.