Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties.&nbsp;

<h2>About the sanctions</h2>

In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web.&nbsp;

The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction.&nbsp;

WATCH |&nbsp;Australia sanctions Russian hacker for role in 2022 Medibank cyberattack

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/australia-sanctions-russian-hacker-for-role-in-2022-medibank-cyberattack-682809/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses.

This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021.&nbsp;

The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”.&nbsp;

“Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil.&nbsp;

She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.”&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/medibank-data-leak-hackers-now-release-info-related-to-abortion-533115">Medibank data leak: Australian police blame Russian hackers</a>

The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments.

O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil.&nbsp;

<h2>‘Single most devastating cyber-attack’</h2>

A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes.&nbsp;

In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese.

However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/australias-biggest-health-insurer-medibank-reports-huge-data-breach-527061">Australia's biggest health insurer Medibank reports huge data breach</a>

They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers.&nbsp;

The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures.

(With inputs from agencies) 
&nbsp;

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank.

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties. About the sanctions In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web. The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction. WATCH | Australia sanctions Russian hacker for role in 2022 Medibank cyberattack Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses. This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021. The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”. “Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil. She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.” ALSO READ | Medibank data leak: Australian police blame Russian hackers The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments. O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil. ‘Single most devastating cyber-attack’ A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes. In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese. However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online. ALSO READ | Australia's biggest health insurer Medibank reports huge data breach They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers. The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures. (With inputs from agencies)

Medibank breach: Russian hacker sanctioned for role in Australia’s biggest data theft

The attack on Kyivstar, Ukraine's largest electronic communications operator took out mobile and home internet service for as many as 24 million people in Ukraine.

Report: Russian hackers gained access to Kyivstar's system

Attack on Ukrainian telecom provider disrupted services for 24 mn people

Europe's most hazardous nuclear site Sellafield is facing a double trouble. On one hand a major leak of radioactive waste has made it a huge public risk and on the other the Guardian has confirmed that foreign cyber groups have compromised its online systems.

Europe's most dangerous nuclear site faces twin challenge: A leak and a cyberattack

Taiwan has been taking measures to counter espionage activities by China ahead of the presidential polls. The Democratic Progressive Party (DPP) had passed sweeping anti-espionage laws ahead of the 2020 election, after self-confessed Chinese spy Wang Liqiang told Australian media about China's espionage activities in Taiwan

Taiwan's crackdown on Chinese spies ahead of presidential polls

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial &amp; Commercial Bank of China Ltd. (ICBC), Bloomberg reported on Friday.&nbsp;

This disclosure by the world's largest lender by total assets has disrupted Treasury market trades, leading to the rerouting of transactions by brokers and traders. The incident has raised concerns globally, prompting cybersecurity experts to emphasise the urgency for banks to enhance their defence mechanisms.&nbsp;

LockBit has emerged as one of the most prolific ransomware gangs in recent years, conducting cyberattacks globally. The group's activities have been ongoing since at least the beginning of 2020, targeting up to 1,000 victims and extorting over $100 million in ransom demands, according to the US Justice Department. &nbsp;

LockBit operates as a "ransomware as a service" enterprise, where core hackers develop malware, and freelance cybercriminals sign up with LockBit to execute the attacks. The gang receives a commission, typically around 20 per cent of any ransom paid, showcasing a business-like approach to its illicit activities.&nbsp;

The devastating impact of LockBit's attacks extends beyond ICBC, affecting entities across Europe, the US, China, India, Indonesia, and Ukraine, as highlighted by cybersecurity firm Kaspersky. The gang's modus operandi involves using ransomware to infiltrate systems, holding them hostage and demanding payment for their release. Threats to leak compromised data often add pressure on victims to comply with the ransom demands.&nbsp;

Researchers studying LockBit's tactics note that the group regularly updates its malicious software to evade detection by cybersecurity products. LockBit's flexibility is evident in its experimentation with self-spreading malware, such as the LockBit Black strain, making infiltration easier for hackers without extensive technical expertise. The group's geographical base and the number of individuals involved remain unknown, but LockBit has asserted on its website that it refrains from attacking post-Soviet Union countries.&nbsp;

Since the Chinese government has previously prohibited cryptocurrency trading, criminal groups tend to avoid targeting the region as cryptocurrency is the most favoured payment method for hackers. The historical alignment of China with Russia has also made it a less attractive target for those with Russian affiliations. However, LockBit’s recent attack on ICBC challenges this notion.

Cybersecurity experts speculate that if targeting proves to be a mistake, LockBit might assist in the recovery by offering free decryption, a gesture they have made in previous incidents involving incorrect victims.

(With inputs from Bloomberg)&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial & Commercial Bank of China Ltd.

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial & Commercial Bank of China Ltd. (ICBC), Bloomberg reported on Friday. This disclosure by the world's largest lender by total assets has disrupted Treasury market trades, leading to the rerouting of transactions by brokers and traders. The incident has raised concerns globally, prompting cybersecurity experts to emphasise the urgency for banks to enhance their defence mechanisms. LockBit has emerged as one of the most prolific ransomware gangs in recent years, conducting cyberattacks globally. The group's activities have been ongoing since at least the beginning of 2020, targeting up to 1,000 victims and extorting over $100 million in ransom demands, according to the US Justice Department. LockBit operates as a "ransomware as a service" enterprise, where core hackers develop malware, and freelance cybercriminals sign up with LockBit to execute the attacks. The gang receives a commission, typically around 20 per cent of any ransom paid, showcasing a business-like approach to its illicit activities. The devastating impact of LockBit's attacks extends beyond ICBC, affecting entities across Europe, the US, China, India, Indonesia, and Ukraine, as highlighted by cybersecurity firm Kaspersky. The gang's modus operandi involves using ransomware to infiltrate systems, holding them hostage and demanding payment for their release. Threats to leak compromised data often add pressure on victims to comply with the ransom demands. Researchers studying LockBit's tactics note that the group regularly updates its malicious software to evade detection by cybersecurity products. LockBit's flexibility is evident in its experimentation with self-spreading malware, such as the LockBit Black strain, making infiltration easier for hackers without extensive technical expertise. The group's geographical base and the number of individuals involved remain unknown, but LockBit has asserted on its website that it refrains from attacking post-Soviet Union countries. Since the Chinese government has previously prohibited cryptocurrency trading, criminal groups tend to avoid targeting the region as cryptocurrency is the most favoured payment method for hackers. The historical alignment of China with Russia has also made it a less attractive target for those with Russian affiliations. However, LockBit’s recent attack on ICBC challenges this notion. Cybersecurity experts speculate that if targeting proves to be a mistake, LockBit might assist in the recovery by offering free decryption, a gesture they have made in previous incidents involving incorrect victims. (With inputs from Bloomberg) WATCH WION LIVE HERE

LockBit ransomware gang strikes ICBC, sends shockwaves through financial markets

Indian Space Research Organisation, ISRO, faces over 100 cyber-attacks daily. With the risk of cyber-attacks being much higher in rocket technology, the chairman of ISRO has said that India's space agency faces more than 100 cyber attacks on a daily basis. Interestingly the possibility of cyber attacks is much higher in rocket technology.

Indian space agency ISRO fights over 100 cyber attacks every day

Bharatpur (Rajasthan) and Mathura (Uttar Pradesh) have crossed Jamtara (Jharkhand) and Nuh (Haryana) as infamous cybercrime hotspots in India, a new study revealed.

Bharatpur (Rajasthan) and Mathura (Uttar Pradesh) have crossed Jamtara (Jharkhand) and Nuh (Haryana) as infamous cybercrime hotspots in India, a new study revealed. The study also said the top 10 districts in the list directly contribute to 80 per cent of cybercrime in the nation. The Future Crime Research Foundation (FCRF), a non-profit IIT Kanpur-incubated start-up, mentioned these findings in its latest comprehensive white paper, A Deep Dive Into Cybercrime Trends Impacting India. Below is the list of the cities contributing to the highest cybercrime cases in India, collectively accounting for 80 per cent of reported events, the FCRF claimed. Bharatpur: 18 per cent Mathura: 12 per cent Nuh: 11 per cent Deoghar: 10 per cent Jamtara: 9.6 per cent Gurugram: 8.1 per cent Alwar: 5.1 per cent Bokaro: 2.4 per cent Karma Tand: 2.4 per cent Giridih: 2.3 per cent "Our analysis focuses on the top 10 districts in India that are most prone to cybercrime. As identified in the white paper, understanding the key factors contributing to cybercrime in these districts is essential for devising effective prevention and mitigation strategies," FCRF co-founder Harshvardhan Singh told PTI. ALSO READ | Apple aims to boost manufacturing and invest $40 billion in India: Report Analysis revealed several similarities between the top 10 Indian cybercrime hubs, including geographical proximity to urban centres, limited cyber security infrastructure, economic challenges and low digital literacy, said Singh. "Addressing these factors through targeted awareness campaigns, law enforcement resources, and educational initiatives is crucial to reducing cybercrime rates in these districts and enhancing the overall cyber security landscape of India," he added. The FCRF study also mentioned that the emerging new hotspots require the same amount of attention and proactive actions as the established cybercrime hubs that continue to pose significant threats. The new cybercrime hubs are typically those regions where various types of digital criminal activity are rising, often catching law-enforcement agencies and the public off guard. The non-profit organisation ascribed the rise in such occurrences to a complex interaction of several variables. They included low technological hurdles that allow people with little knowledge to engage in such operations using easily accessible hacking tools and malware. Law enforcement agencies face difficulty tracing cybercriminals with fake identities due to inadequate Know Your Customer (KYC) verification processes on online platforms. The easy availability of faked accounts and rented SIM cards on the black markets allows thugs to operate anonymously, creating a challenge for the authorities to track and prosecute them, the study stated. Another added advantage for cybercriminals nowadays is the affordability of AI-driven cyberattack tools that provide automation and expansion of the attack. Furthermore, virtual private networks (VPNs) give anonymity to cybercriminals, making it hard for the authorities to find their location. The FCRF study also flagged that the growing pool of potential criminals typically consists of unemployed or underemployed individuals. (With inputs from agencies) WATCH WION LIVE HERE

Infamous cybercrime hubs of India: Mathura and Bharatpur pip Jamtara and Nuh, says study

According to a Microsoft report, Chinese state-linked hackers have secretly accessed the email accounts of around 25 organizations in a sweeping cyber Espionage campaign.

Chinese spies accuse of worldwide cyber espionage

The Indian army and educational institutions are experiencing persistent cyber attacks from a Pakistan-based group. What does Pakistan want from the Indian army? Molly Gambhir tells you how.

Gravitas: Pakistan hits Indian army with cyber attacks

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an <a href="https://go.checkpoint.com/2023-cyber-security-report/chapter-03.php">analysis </a>by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

The latest cyber-attack on India’s premier&nbsp;medical institution, the All India Institute of Medical Science&nbsp;(AIIMS), New Delhi,&nbsp;the <a href="https://www.wionews.com/india-news/aiims-says-malware-attack-successfully-thwarted-by-cyber-security-systems-601396">second such attack in a row</a> has rekindled discussion over India's&nbsp;preparedness&nbsp;to deal with attacks of the given nature.&nbsp;AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered.&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe aria-label="Grouped Bars" data-external="1" frameborder="0" height="546" id="datawrapper-chart-7Exvx" scrolling="no" src="https://datawrapper.dwcdn.net/7Exvx/1/" style="border: none;" title="Avg weekly cyber attacks per organisation by sector in 2022 (Globally)" width="600"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<h2 dir="ltr">Why is India being targetted?</h2>

Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies.

“The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION.

<h2 dir="ltr">India’s healthcare sector a constant target? Why is health-related data so critical?</h2>

A nationwide initiative to <a href="https://main.mohfw.gov.in/sites/default/files/17739294021483341357.pdf">digitise medical data</a> was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records.&nbsp;

“Healthcare data is a prime target for <a href="https://www.wionews.com/india-news/delhis-bigest-cyber-fraud-doctor-duped-of-rs-45-crore-548k-via-skype-calls-594502">cyber-criminals</a> due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G.

He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks.&nbsp;

Also watch |&nbsp;Second malware attack at AIIMS, New Delhi&nbsp;

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/second-malware-attack-at-aiims-new-delhi-cyber-attack-india-news-601464/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<h2 dir="ltr">Digitalisation and the risk of cyber-crimes</h2>

As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation.

“The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said.&nbsp;

<h2>Way forward</h2>

Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case?

“To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains.&nbsp;

The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the <a href="https://www.meity.gov.in/writereaddata/files/DIA_Presentation%2009.03.2023%20Final.pdf">digital India Act</a>.

 
WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst. The latest cyber-attack on India’s premier medical institution, the All India Institute of Medical Science (AIIMS), New Delhi, the second such attack in a row has rekindled discussion over India's preparedness to deal with attacks of the given nature. AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered. × Why is India being targetted? Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies. “The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION. India’s healthcare sector a constant target? Why is health-related data so critical? A nationwide initiative to digitise medical data was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records. “Healthcare data is a prime target for cyber-criminals due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G. He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks. Also watch | Second malware attack at AIIMS, New Delhi Digitalisation and the risk of cyber-crimes As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation. “The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said. Way forward Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case? “To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains. The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the digital India Act. WATCH WION LIVE HERE:

Data Lab | Digital India and the need to beef up cyber-security in healthcare

India's National Security Board is conducting cyber defense exercises in the wake of threats from China and other adversaries mounting by the day. The agencies including India's TRAI services are participating in the week-long exercise to test the resilience of India's civilian and Military infrastructure. The cyber security exercises are being held under the ages of India's defense cyber agency with participants aiming to test the firewalls guarding India's critical infrastructure.

India gears up to deal with cyber threats

Cyber security has become a huge issue in the past few years with several companies and countries falling victim&nbsp;to&nbsp; cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem. Now, a new report on cyber security has warned that in the coming two years cyber attacks might pose an unprecedented threat.&nbsp;&nbsp;

The World Economic Forum (WEF) Global Security Outlook Report 2023 has predicted that a “catastrophic cyber event" is on the way and will hit us in the "near future". WEF managing director Jeremy Jurgens, during a presentation, said that "geopolitical instability makes a catastrophic cyber event likely in the next two years". Jurgens said that the prediction comes from 93 per cent of cyber leaders, and 86 per cent of cyber business leaders. "This far exceeds anything that we’ve seen in previous surveys.”

Talking about cyber security, Jurgens referred to a recent cyberattack that aimed to shut down Ukrainian military abilities, but unexpectedly led to closing off of parts of electricity production across Europe.&nbsp;

Secretary-General of Interpol, Jürgen Stock, was also present and called it "a global threat". “It calls for a global response and enhanced and coordinated action.” He urged multiple bad “actors” who benefit from cybercrime to encourage world leaders to work together to thwart all such efforts.&nbsp;

Also Read |&nbsp;<a href="https://www.wionews.com/world/russia-alleges-us-of-training-ukrainian-it-army-recruiting-hackers-556807">Russia accuses US of training ‘Ukrainian IT Army’</a>

Albania, one of the countries that fell prey to a massive cyberattack recently, has now been working with larger allies to fight cyber criminals. Edi Rama, Albania’s prime minister, came up with some shocking numbers at the presentation, saying that if cybercrime was a state, it would be the third largest global economy after the US and China. Rama said that the cybercrime industry stood at $3 trillion in 2015 and is expected to grow to $10.5 trillion in 2025.&nbsp;

Rama compared the predicted cyberattack to a virus like Covid-19 and how it can turn to an "apocalypse".

“Let’s imagine an exponential multitude of viruses that mutate everyday exponentially while not threatening our body, but the bodies we live in, our organisations, our countries, our system, then, you know, it could be just apocalypse. It’s about viruses that can not only block our way of living, but can control it and deviate it.”

(With inputs from agencies)

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Cyber security has become a huge issue in the past few years with several companies and countries falling victim to cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem.

Cyber security has become a huge issue in the past few years with several companies and countries falling victim to cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem. Now, a new report on cyber security has warned that in the coming two years cyber attacks might pose an unprecedented threat. The World Economic Forum (WEF) Global Security Outlook Report 2023 has predicted that a “catastrophic cyber event" is on the way and will hit us in the "near future". WEF managing director Jeremy Jurgens, during a presentation, said that "geopolitical instability makes a catastrophic cyber event likely in the next two years". Jurgens said that the prediction comes from 93 per cent of cyber leaders, and 86 per cent of cyber business leaders. "This far exceeds anything that we’ve seen in previous surveys.” Talking about cyber security, Jurgens referred to a recent cyberattack that aimed to shut down Ukrainian military abilities, but unexpectedly led to closing off of parts of electricity production across Europe. Secretary-General of Interpol, Jürgen Stock, was also present and called it "a global threat". “It calls for a global response and enhanced and coordinated action.” He urged multiple bad “actors” who benefit from cybercrime to encourage world leaders to work together to thwart all such efforts. Also Read | Russia accuses US of training ‘Ukrainian IT Army’ Albania, one of the countries that fell prey to a massive cyberattack recently, has now been working with larger allies to fight cyber criminals. Edi Rama, Albania’s prime minister, came up with some shocking numbers at the presentation, saying that if cybercrime was a state, it would be the third largest global economy after the US and China. Rama said that the cybercrime industry stood at $3 trillion in 2015 and is expected to grow to $10.5 trillion in 2025. Rama compared the predicted cyberattack to a virus like Covid-19 and how it can turn to an "apocalypse". “Let’s imagine an exponential multitude of viruses that mutate everyday exponentially while not threatening our body, but the bodies we live in, our organisations, our countries, our system, then, you know, it could be just apocalypse. It’s about viruses that can not only block our way of living, but can control it and deviate it.” (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

An 'apocalypse': Report warns of a 'catastrophic cyber event' in next two years

Over the course of 2022, businesses in the UK saw 788 cyberattacks a week on average. This is an increase of 77% from 2021. The latest statistics show that sophisticated ransomware gangs are mostly to blame for the rising concerns about cyberattacks.

Reports: Cyber attacks on UK organisations surged 77% in 2022

Following news of a Russian financed ransomware gang assaulting a corporation that plays a major part in Britain's Financial System, stock trading in London has been thrown into pandemonium.

UK: Cyber attack on software provider disrupts trading of shares

The ransomware attack on the servers of the<a href="https://www.wionews.com/india-news/delhi-aiims-ransomware-attack-china-involvement-suspected-data-of-vvips-including-politicians-at-risk-539455"> All India Institute of Medical Sciences (AIIMS), Delhi</a> was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source. It added that of the 100 servers, five physical servers were successfully infiltrated by the hackers.&nbsp;

"AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers has been successfully retrieved now," the source from the Union health ministry told ANI on Wednesday.&nbsp;

The personal details of millions of patients in AIIMS Delhi were at risk due to the ransomware attack last month. In December, a special cell of the Delhi Police launched an investigation into the attack.&nbsp;

The investigations found that the IP addresses of two emails identified from the headers of files encrypted by the hackers originated from Hong Kong and China’s Henan province. 
Meanwhile, authorities from AIIMS said in a statement that the e-hospital data was restored.&nbsp;

"The e-hospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and a large number of servers/computers for the hospital services. Measures are being taken for cyber security," the statement said.&nbsp;

It added all hospital services, including outpatient, in-patient, laboratories, etc., continue to run on manual mode.&nbsp; 
 
AIIMS, Delhi, faced the cyberattack on November 23 after which a case of extortion and cyber terrorism was registered by the Delhi Police on November 25. The internet services were blocked as per the recommendations of the investigating agencies.&nbsp;

Computer Emergency Response Team (CERT-In), Delhi cybercrime special cell, Indian Cybercrime Coordination Centre, Intelligence Bureau, CBI and National Investigation Agency, are investigating the ransomware attack that is feared to have compromised the records of nearly four crore patients. 
&nbsp;

(With inputs from ANI)&nbsp;

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The ransomware attack on the servers of the All India Institute of Medical Sciences (AIIMS), Delhi was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source.

The ransomware attack on the servers of the All India Institute of Medical Sciences (AIIMS), Delhi was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source. It added that of the 100 servers, five physical servers were successfully infiltrated by the hackers. "AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers has been successfully retrieved now," the source from the Union health ministry told ANI on Wednesday. The personal details of millions of patients in AIIMS Delhi were at risk due to the ransomware attack last month. In December, a special cell of the Delhi Police launched an investigation into the attack. The investigations found that the IP addresses of two emails identified from the headers of files encrypted by the hackers originated from Hong Kong and China’s Henan province. Meanwhile, authorities from AIIMS said in a statement that the e-hospital data was restored. "The e-hospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and a large number of servers/computers for the hospital services. Measures are being taken for cyber security," the statement said. It added all hospital services, including outpatient, in-patient, laboratories, etc., continue to run on manual mode. AIIMS, Delhi, faced the cyberattack on November 23 after which a case of extortion and cyber terrorism was registered by the Delhi Police on November 25. The internet services were blocked as per the recommendations of the investigating agencies. Computer Emergency Response Team (CERT-In), Delhi cybercrime special cell, Indian Cybercrime Coordination Centre, Intelligence Bureau, CBI and National Investigation Agency, are investigating the ransomware attack that is feared to have compromised the records of nearly four crore patients. (With inputs from ANI) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Delhi AIIMS ransomware attack carried out by hackers from China, Hong Kong: Report

According to the government sources, the attack on the computer system of the All India Institute of Medical Sciences in Delhi originated from China. Watch this video to know more.

WION Dispatch: China behind AIIMS Delhi server attack?

Last month, a ransomware attack compromised the personal data of approximately five million passengers and all Air Asia employees. Malaysian authorities are still investigating the source and the overall impact but have gathered few leads so far.

Malaysia launches investigation into low-cost airline Air Asia ransomware attack

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday. Meanwhile, a preliminary investigation has been opened based on the hospital’s formal complaint.&nbsp;

Authorities at the Hospital Centre of Versailles which also includes Andre-Mignot Hospital, Richaud Hospital and the Despagne Retirement Home, said that they were affected by the hacking attempt. According to France’s Regional Health Agency (ARS), while the&nbsp;Andre-Mignot Hospital&nbsp;has suspended operations it is working to keep the walk-in services and consultations running.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/vanuatu-island-hit-by-ransom-attack-cripples-government-535355">Vanuatu island hit by ransom attack, cripples government</a>

Furthermore, the French minister for social affairs and health, Francois Braun, also visited the hospital and said three patients from intensive care and three from the neonatal unit were transferred and others might follow, said a report by AFP.&nbsp;&nbsp;

The hospital required additional staff for the intensive care unit (ICU) as&nbsp;the machines were working but they needed someone to monitor them since they were no longer a part of the network, said the health minister. He also spoke about how the incident has led to a complete “reorganization of the hospital”.&nbsp;&nbsp;

ALSO WATCH:&nbsp;<a href="https://www.wionews.com/videos/gravitas-ransomware-attack-on-aiims-server-is-the-world-prepared-to-fight-a-cyber-war-537227">Gravitas | 'Ransomware' attack on AIIMS server: Is the world prepared to fight a cyber war?</a>

Earlier this year, another hospital just outside Paris also witnessed a cyber attack and took several weeks to recover before it got back to normal functioning. 
 
The Corbeil-Essonnes hospital was asked for a $10 million ransom which was later lowered to two million dollars. The hackers had given September 23 as the deadline after which they posted confidential files on the staff and patients on the dark web.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/india-news/delhi-aiims-ransomware-attack-china-involvement-suspected-data-of-vvips-including-politicians-at-risk-539455">Delhi AIIMS ransomware attack: China involvement suspected, data of VVIPs, celebrities at risk</a>

France’s hospitals and health systems have recently witnessed “daily attacks”, said Braun. He added that most of these attempts have been prevented. Meanwhile, the prosecutor's office in Paris has opened a preliminary investigation after the hospital filed a formal complaint into hacking state data and attempted extortion, reported AFP.&nbsp; 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday.

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday. Meanwhile, a preliminary investigation has been opened based on the hospital’s formal complaint. Authorities at the Hospital Centre of Versailles which also includes Andre-Mignot Hospital, Richaud Hospital and the Despagne Retirement Home, said that they were affected by the hacking attempt. According to France’s Regional Health Agency (ARS), while the Andre-Mignot Hospital has suspended operations it is working to keep the walk-in services and consultations running. ALSO READ | Vanuatu island hit by ransom attack, cripples government Furthermore, the French minister for social affairs and health, Francois Braun, also visited the hospital and said three patients from intensive care and three from the neonatal unit were transferred and others might follow, said a report by AFP. The hospital required additional staff for the intensive care unit (ICU) as the machines were working but they needed someone to monitor them since they were no longer a part of the network, said the health minister. He also spoke about how the incident has led to a complete “reorganization of the hospital”. ALSO WATCH: Gravitas | 'Ransomware' attack on AIIMS server: Is the world prepared to fight a cyber war? Earlier this year, another hospital just outside Paris also witnessed a cyber attack and took several weeks to recover before it got back to normal functioning. The Corbeil-Essonnes hospital was asked for a $10 million ransom which was later lowered to two million dollars. The hackers had given September 23 as the deadline after which they posted confidential files on the staff and patients on the dark web. ALSO READ | Delhi AIIMS ransomware attack: China involvement suspected, data of VVIPs, celebrities at risk France’s hospitals and health systems have recently witnessed “daily attacks”, said Braun. He added that most of these attempts have been prevented. Meanwhile, the prosecutor's office in Paris has opened a preliminary investigation after the hospital filed a formal complaint into hacking state data and attempted extortion, reported AFP. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

French hospital forced to suspend operations, transfer patients after cyberattack

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister,&nbsp;one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said.

The Pacific island nation of 314,000 inhabitants and 80 islands has experienced delays in communication and coordination as a result of the malware attack on state networks.&nbsp;

To get government phone numbers, people turned to the internet Yellow Pages or the printed phone book. Some offices were hiding their Twitter and Facebook accounts.

According to a financial analyst who closely collaborates with the ministry's cybersecurity staff, the issues started approximately a month ago when suspected phishing activity was first discovered in emails sent to the Ministry of Finance.&nbsp;

Almost all government email and website archives were destroyed by malware. As opposed to web servers or the cloud, many departments continued to keep data on local hard drives.&nbsp;

Also Read:<a href="https://www.wionews.com/world/iran-more-than-300-dead-in-protests-sparked-by-aminis-death-says-irgc-general-538527">&nbsp;Iran: More than 300 dead in protests sparked by Amini's death, says IRGC general</a>

Whether the hackers demanded a ransom has not been made public by the government.&nbsp;

Inadvertent solutions have been used to improve communication between agencies and departments as government departments have struggled to keep linked, frustrating authorities.&nbsp;

Service delays at several government offices on outer islands are severe.

(with inputs from agencies)

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister, one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said.

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister, one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said. The Pacific island nation of 314,000 inhabitants and 80 islands has experienced delays in communication and coordination as a result of the malware attack on state networks. To get government phone numbers, people turned to the internet Yellow Pages or the printed phone book. Some offices were hiding their Twitter and Facebook accounts. According to a financial analyst who closely collaborates with the ministry's cybersecurity staff, the issues started approximately a month ago when suspected phishing activity was first discovered in emails sent to the Ministry of Finance. Almost all government email and website archives were destroyed by malware. As opposed to web servers or the cloud, many departments continued to keep data on local hard drives. Also Read: Iran: More than 300 dead in protests sparked by Amini's death, says IRGC general Whether the hackers demanded a ransom has not been made public by the government. Inadvertent solutions have been used to improve communication between agencies and departments as government departments have struggled to keep linked, frustrating authorities. Service delays at several government offices on outer islands are severe. (with inputs from agencies)

Vanuatu officials using pen and paper to run government, one month after cyber attack

In the case of suspected cyberattack, the tire-maker Continental, it is investigating theft of company data. However, company declined to comment so far on reports that hackers had put up any information for sale

World Business Watch: Continental investigates cyberattack; data up for sale for $50 mn, say reports

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale.

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
In a case of a suspected cyberattack, tyre maker <a href="https://twitter.com/hashtag/Continental?src=hash&amp;ref_src=twsrc%5Etfw">#Continental</a> is investigating theft of company's data. Reportedly, the budget, investment and strategy plans were leaked.<a href="https://twitter.com/joinsumit?ref_src=twsrc%5Etfw">@joinsumit</a> tells you more 
 
Watch more: <a href="https://t.co/AXC5qRuO3J">https://t.co/AXC5qRuO3J</a> <a href="https://t.co/6LcIjNiW2P">pic.twitter.com/6LcIjNiW2P</a>
— WION (@WIONews) <a href="https://twitter.com/WIONews/status/1592747932356603905?ref_src=twsrc%5Etfw">November 16, 2022</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The manufacturer said its investigation was moving ahead with the highest priority.

What is Continental data leak row all about?

German news outlet Handelsblatt reported on November 7 that a group of hackers, named 'Lockbit 3.0', tapped into Continental's data. About 40 terabytes of data was reportedly stolen in&nbsp;the cyber attack in August. The hackers reportedly demanded a ransom from Continental which the mobility solutions-major "apparently did not want to pay". Following this, the hackers put the data for sale for $50 million, Handelsblatt reported.

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/millions-of-personal-data-leaked-online-after-medibank-refuses-to-pay-ransom-532442">Millions of personal data leaked online after Medibank refuses to pay ransom</a>

Earlier on Tuesday business daily Handelsblatt reported that hackers had published a list of the data on the 'dark net' and that it included budget, investment and strategy plans, as well as information related to some Continental customers.

What Continental is doing about data leak?

The company has launched an investigation into the incident "with the support of external cybersecurity experts", according to a spokesperson's comment. German prosecutors are also investigating the attack to nab the hackers.&nbsp;

WATCH |&nbsp;<a href="https://www.wionews.com/videos/chinas-data-breach-of-over-1-billion-people-key-details-494945">China’s data breach of over 1 billion people: Key details</a>

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/chinas-data-breach-of-over-1-billion-people-key-details-494945/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

Continental sold automotive solutions worth $22.4 billion in 2021. It ranks number eight on the list of top 100 global automotive&nbsp;suppliers, compiled by Michigan-based weekly newspaper Automotive News.&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale.

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale. In a case of a suspected cyberattack, tyre maker #Continental is investigating theft of company's data. Reportedly, the budget, investment and strategy plans were leaked.@joinsumit tells you more Watch more: https://t.co/AXC5qRuO3J pic.twitter.com/6LcIjNiW2P — WION (@WIONews) November 16, 2022 × The manufacturer said its investigation was moving ahead with the highest priority. What is Continental data leak row all about? German news outlet Handelsblatt reported on November 7 that a group of hackers, named 'Lockbit 3.0', tapped into Continental's data. About 40 terabytes of data was reportedly stolen in the cyber attack in August. The hackers reportedly demanded a ransom from Continental which the mobility solutions-major "apparently did not want to pay". Following this, the hackers put the data for sale for $50 million, Handelsblatt reported. ALSO READ | Millions of personal data leaked online after Medibank refuses to pay ransom Earlier on Tuesday business daily Handelsblatt reported that hackers had published a list of the data on the 'dark net' and that it included budget, investment and strategy plans, as well as information related to some Continental customers. What Continental is doing about data leak? The company has launched an investigation into the incident "with the support of external cybersecurity experts", according to a spokesperson's comment. German prosecutors are also investigating the attack to nab the hackers. WATCH | China’s data breach of over 1 billion people: Key details × Continental sold automotive solutions worth $22.4 billion in 2021. It ranks number eight on the list of top 100 global automotive suppliers, compiled by Michigan-based weekly newspaper Automotive News. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

German firm Continental targeted by hackers, launches probe after report says data up for sale

Cyber attacks against Australia from criminals and state-sponsored groups jumped last financial year, with a government report released on Friday equating the assault to one attack every seven minutes.

WION Business News | Australia: One cyber attack every seven minutes

After a recent spike in cyber attacks in Australia. The latest is that a communications platform used by the Australian military personnel and defence staff has come under ransomware attack.

Australia: Hackers hit defence communications platform, to increase penalties for data breaches

In the latest string of cyber attacks, Medibank says data of 4 million customers was accessed after a ransomware attack. Watch this report for all the details.

Australia: Medibank says data of 4 million customers accessed

One of the largest Australian private health insurance providers has been hit by a “cyber incident”. Medibank Group detected unusual activity on its network on Wednesday and subsequently took immediate steps to contain the incident.

World Business Watch: Australia's Medibank reports ‘cyber incident’ following suspicious activity

Some of the US airport websites were hit by a cyber attack. Though there are no concrete reports on disruptions in services, the sites were not offline but they were overloaded from fake web users.

World Business Watch: US airport websites hit by cyber attacks

Singapore Telecommunications Ltd said that its unit Dialog faced a cyber attack that potentially affected 1,000 current and former employees and fewer than 20 clients, weeks after a massive data breach at another Australian unit, Optus.

World Business Watch: Singtel's Dialog unit faces cyber attack weeks after Optus data breach

Ferrari said some internal documents had been posted online but it has no evidence of a breach of its systems or ransomware. The luxury sports carmaker company also added that it is working to identify how this had happened.

World Business Watch: Ferrari says no evidence of system breach

The second-largest telecommunications company in Australia, Optus, suffered a significant cybersecurity breach 12 days ago, and its owner Singapore Telecommunications or Singtel on Monday said it is still trying to estimate the possible cost of the damage caused.

Singtel's statement came amid reports that it might end up paying significant compensation for the theft of sensitive information from 10 million users. Although the telecommunication firm is said to have hired lawyers to assist it, it has not received any official notice of the case, amid reports of a possible class action suit by consumers.

<a href="https://www.wionews.com/world/australia-launches-operation-guardian-to-protect-optus-data-breach-victims-521194">Also read |&nbsp;Australia launches 'Operation Guardian' to protect Optus data breach victims</a>

On Monday (October 3), Optus announced that Deloitte had been selected to conduct an impartial, external review of the attack.&nbsp;

The Australian government has demanded that the businesses notify the people affected and said that customers were at risk of financial crimes.

"Singtel is continuing to evaluate the potential financial implications arising from this matter and any material development will be disclosed to the market on a timely basis," the company said in a statement.

<a href="https://www.wionews.com/world/optus-leak-over-10k-records-posted-online-writer-later-deletes-post-and-apologises-520066">Also read |&nbsp;Optus leak: Over 10K records posted online, purported hacker deletes post and apologises</a>

The Optus chief executive said in a video message that about 2.1 million of its users, out of 10 million, were compromised with their identity numbers revealed. She said that the corporation has notified all 10,000 people that the data has been leaked online and is collaborating with the police.&nbsp;

The law firm Slater &amp; Gordon and Maurice Balckburn stated that they are currently looking into the possibility of filing a case action against Optus to seek compensation for anyone who has been impacted by this incident.

Nearly 40 per cent of Australians have been impacted by this Optus cyber breach.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

The second-largest telecommunications company in Australia, Optus, suffered a significant cybersecurity breach 12 days ago, and its owner Singapore Telecommunications or Singtel on Monday said it is still trying to estimate the possible cost of the damage caused.

The second-largest telecommunications company in Australia, Optus, suffered a significant cybersecurity breach 12 days ago, and its owner Singapore Telecommunications or Singtel on Monday said it is still trying to estimate the possible cost of the damage caused. Singtel's statement came amid reports that it might end up paying significant compensation for the theft of sensitive information from 10 million users. Although the telecommunication firm is said to have hired lawyers to assist it, it has not received any official notice of the case, amid reports of a possible class action suit by consumers. Also read | Australia launches 'Operation Guardian' to protect Optus data breach victims On Monday (October 3), Optus announced that Deloitte had been selected to conduct an impartial, external review of the attack. The Australian government has demanded that the businesses notify the people affected and said that customers were at risk of financial crimes. "Singtel is continuing to evaluate the potential financial implications arising from this matter and any material development will be disclosed to the market on a timely basis," the company said in a statement. Also read | Optus leak: Over 10K records posted online, purported hacker deletes post and apologises The Optus chief executive said in a video message that about 2.1 million of its users, out of 10 million, were compromised with their identity numbers revealed. She said that the corporation has notified all 10,000 people that the data has been leaked online and is collaborating with the police. The law firm Slater & Gordon and Maurice Balckburn stated that they are currently looking into the possibility of filing a case action against Optus to seek compensation for anyone who has been impacted by this incident. Nearly 40 per cent of Australians have been impacted by this Optus cyber breach. (With inputs from agencies) WATCH WION LIVE HERE

Optus leak: Singapore Telecommunications appoints Deloitte to assess data breach

China has accused US National Security Agency (NSA) for launching cyber attacks on a elite Chinese university to steal sensitive data, Xinhua News Agency has reported.

In its investigation report, China's National Computer Virus Emergency Response Centre&nbsp;(CVERC) said that NSA-affiliated Tailored Access Operations (TAO) Office—an elite team of hacking group—used “41 types of cyber weapons” against China's Northwestern Polytechnical University.

Among them, one such tool, “Suctionchar" is said to have helped them hack into the university’s network by stealing account credentials and file transfer applications to hijack logins on targeted servers, the CVERC said.

The agency said that it found traces of Suctionchar in many other Chinese networks apart from Northwestern’s, accusing the NSA of launching more than 10,000 cyberattacks on China over the past several years.

It claimed that TAO has "stolen over 140 gigabytes of high-value data" in recent years and received assistance from groups in Europe and South Asia.

On Sunday, China lodged a diplomatic complaint blaming the US for endangering China’s security by targeting its critical infrastructure and institutions, and asked Washington to stop its clandestine activities.

<a href="https://www.mfa.gov.cn/wjdt_674879/sjxw_674887/202209/t20220911_10765059.shtml">In a statement</a>, Yang Tao, the director-general of American affairs at China’s ministry of foreign affairs, affirmed the CVERC report, saying the NSA had “seriously violated the technical secrets of relevant Chinese institutions and seriously endangered the security of China’s critical infrastructure, institutions and personal information, and must be stopped immediately.”

In the past, the US justice department had referred the school as a “<a href="https://www.justice.gov/opa/pr/chinese-national-pleads-guilty-illegal-exports-northwestern-polytechnical-university">Chinese military university </a>that is heavily involved in military research and works closely with the People’s Liberation Army,” claiming that it is a reasonable target for digital infiltration from an American perspective.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

China has accused US National Security Agency (NSA) for launching cyber attacks on a elite Chinese university to steal sensitive data, Xinhua News Agency has reported.

China has accused US National Security Agency (NSA) for launching cyber attacks on a elite Chinese university to steal sensitive data, Xinhua News Agency has reported. In its investigation report, China's National Computer Virus Emergency Response Centre (CVERC) said that NSA-affiliated Tailored Access Operations (TAO) Office—an elite team of hacking group—used “41 types of cyber weapons” against China's Northwestern Polytechnical University. Among them, one such tool, “Suctionchar" is said to have helped them hack into the university’s network by stealing account credentials and file transfer applications to hijack logins on targeted servers, the CVERC said. The agency said that it found traces of Suctionchar in many other Chinese networks apart from Northwestern’s, accusing the NSA of launching more than 10,000 cyberattacks on China over the past several years. It claimed that TAO has "stolen over 140 gigabytes of high-value data" in recent years and received assistance from groups in Europe and South Asia. On Sunday, China lodged a diplomatic complaint blaming the US for endangering China’s security by targeting its critical infrastructure and institutions, and asked Washington to stop its clandestine activities. In a statement, Yang Tao, the director-general of American affairs at China’s ministry of foreign affairs, affirmed the CVERC report, saying the NSA had “seriously violated the technical secrets of relevant Chinese institutions and seriously endangered the security of China’s critical infrastructure, institutions and personal information, and must be stopped immediately.” In the past, the US justice department had referred the school as a “Chinese military university that is heavily involved in military research and works closely with the People’s Liberation Army,” claiming that it is a reasonable target for digital infiltration from an American perspective. (With inputs from agencies) WATCH WION LIVE HERE

China accuses US of launching cyber attacks to steal data from its elite university

cyber-attack

Cyber Attack, News on Cyber Attack, stories on Cyber Attack, articles on Cyber Attack, Cyber Attack stories at Wion, Cyber Attack news, Cyber Attack latest news