British Deputy Prime Minister Oliver Dowden tells lawmakers that entities linked to the Chinese government were behind the alleged accessing of the personal details of 40 million UK voters and cyberattacks on lawmakers critical of China.

UK Deputy PM blames China for cyber-attack on election commission

US government on March 19 issued a warning to state governors regarding a series of disruptive cyberattacks targeting water and sewage systems across the nation.

US Environmental Protection Agency (EPA) Administrator Michael Regan and National Security Advisor Jake Sullivan "sent a letter to all US Governors inviting state environmental, health and homeland security Secretaries to a convening by their deputies to discuss the urgent need to safeguard water sector critical infrastructure against cyber threats."

This gathering, which will be held on March 21, will aim to shed light on ongoing federal and state initiatives aimed at bolstering cybersecurity measures within the water sector.

The meeting will also delve into key areas where there are gaps in these efforts, emphasising the urgency for states and water systems to promptly take necessary steps.

EPA Administrator Michael S Regan said, “Drinking water and wastewater systems are a lifeline for communities, but many systems have not adopted important cybersecurity practices to thwart potential cyberattacks."

“EPA and NSC take these threats very seriously and will continue to partner with state environmental, health, and homeland security leaders to address the pervasive and challenging risk of cyberattacks on water systems.”

They specifically identified alleged Iranian and Chinese cyber attackers as culprits behind these attacks. The letter referenced a case where hackers, purportedly linked to Iran's Revolutionary Guards, successfully disabled a controller at a water facility in Pennsylvania.

Also Read |&nbsp;<a href="https://www.wionews.com/world/south-africa-court-orders-partial-freeze-on-zumas-accounts-702402">South Africa court orders partial freeze on Zuma's accounts</a>

Additionally, they mentioned a Chinese hacking group known as "Volt Typhoon" for compromising the IT infrastructure of numerous critical systems, including drinking water facilities in the US.

Meanwhile, Sullivan said,&nbsp;“The Biden Administration has built our national security approach on the foundational integration of foreign and domestic policy, which means elevating our focus on cross-cutting challenges like cybersecurity."

Also Read |&nbsp;<a href="https://www.wionews.com/world/prabowo-subianto-elected-as-new-president-of-indonesia-702387">Prabowo Subianto elected as new president of Indonesia</a>

“We’ve worked across government to implement significant cybersecurity standards in our nation’s critical infrastructure, including in the water sector, as we remain vigilant to the risks and costs of cyber threats. We look forward to continuing our partnership with the EPA to bolster the cybersecurity of America’s water and wastewater systems.”

Watch |&nbsp;<a href="https://www.wionews.com/videos/nato-secretary-general-jens-stoltenberg-visits-armenia-calls-for-peace-with-azerbaijan-702400">NATO Secretary-General Jens Stoltenberg visits Armenia, calls for peace with Azerbaijan</a>

<section>
<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/nato-secretary-general-jens-stoltenberg-visits-armenia-calls-for-peace-with-azerbaijan-702400/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

"These attacks have the potential to disrupt the critical lifeline of clean and safe drinking water, as well as impose significant costs on affected communities," the letter pointed out.
</section>

(With inputs from agencies)

US government on March 19 issued a warning to state governors regarding a series of disruptive cyberattacks targeting water and sewage systems across the nation.

US government on March 19 issued a warning to state governors regarding a series of disruptive cyberattacks targeting water and sewage systems across the nation. US Environmental Protection Agency (EPA) Administrator Michael Regan and National Security Advisor Jake Sullivan "sent a letter to all US Governors inviting state environmental, health and homeland security Secretaries to a convening by their deputies to discuss the urgent need to safeguard water sector critical infrastructure against cyber threats." This gathering, which will be held on March 21, will aim to shed light on ongoing federal and state initiatives aimed at bolstering cybersecurity measures within the water sector. The meeting will also delve into key areas where there are gaps in these efforts, emphasising the urgency for states and water systems to promptly take necessary steps. EPA Administrator Michael S Regan said, “Drinking water and wastewater systems are a lifeline for communities, but many systems have not adopted important cybersecurity practices to thwart potential cyberattacks." “EPA and NSC take these threats very seriously and will continue to partner with state environmental, health, and homeland security leaders to address the pervasive and challenging risk of cyberattacks on water systems.” They specifically identified alleged Iranian and Chinese cyber attackers as culprits behind these attacks. The letter referenced a case where hackers, purportedly linked to Iran's Revolutionary Guards, successfully disabled a controller at a water facility in Pennsylvania. Also Read | South Africa court orders partial freeze on Zuma's accounts Additionally, they mentioned a Chinese hacking group known as "Volt Typhoon" for compromising the IT infrastructure of numerous critical systems, including drinking water facilities in the US. Meanwhile, Sullivan said, “The Biden Administration has built our national security approach on the foundational integration of foreign and domestic policy, which means elevating our focus on cross-cutting challenges like cybersecurity." Also Read | Prabowo Subianto elected as new president of Indonesia “We’ve worked across government to implement significant cybersecurity standards in our nation’s critical infrastructure, including in the water sector, as we remain vigilant to the risks and costs of cyber threats. We look forward to continuing our partnership with the EPA to bolster the cybersecurity of America’s water and wastewater systems.” Watch | NATO Secretary-General Jens Stoltenberg visits Armenia, calls for peace with Azerbaijan × "These attacks have the potential to disrupt the critical lifeline of clean and safe drinking water, as well as impose significant costs on affected communities," the letter pointed out. (With inputs from agencies)

US govt urges state action against cyber threats to water systems

Russia has revealed that approximately 160,000 cyber attacks targeted the nation's remote electronic voting portals however the attacks were successfully blocked by the country additionally 30,000 cyber attacks were directed at the remote voting systems monitoring portal. Watch to know more!

Russia faces cyberattacks on its remote voting systems

The US Department of State Thursday (Feb 8) announced a reward of up to $10 million for information revealing the identity of the leaders of the Hive ransomware gang. The department said it would also pay up to $5 million for info leading to the arrest and conviction of any of the members in any country.

"Beginning in late July 2022, the FBI penetrated Hive's computer networks, obtained its decryption keys and offered them to victims worldwide, preventing victims from having to pay up to $130 million in ransoms demanded," the State Department said in a statement.

<h2>The menace of the Hive ransomware gang</h2>

According to the US government, the gang is responsible for targeting over 1,500 institutions in over 80 nations. The group, through its activities, has stolen over $100 million from school districts, financial firms and critical infrastructure.

Watch:&nbsp;Digital warfare becomes new battlefront enabling rise in cyber influenced operations

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/digital-warfare-becomes-new-battlefront-enabling-rise-in-cyber-influenced-operations-wion-664270/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

Globally, several ransomware gangs operate from different nations, with total payments coughed up by victims surpassing the $1 billion mark in 20203. In the US alone, more than 2,200 hospitals, schools and government institutes were targeted in the last year, along with thousands of private firms.

<h2>How does the gang operate?</h2>

Hive ransomware gang designs malicious software which can infiltrate the computer networks of organisations by deploying various methods, including phishing emails. The group holds their users hostage and demands heavy payment in return for decryption keys to unlock the organisation’s system.

Also read:&nbsp;<a data-jsarwt="1" data-usg="AOvVaw31AhwB6ZZbGFvoylyVqRGh" data-ved="2ahUKEwj4wqm_pJ6EAxUvUGwGHS1QAbIQxfQBKAB6BAgHEAE" href="https://www.wionews.com/india-news/india-warns-apple-users-of-major-cyber-attack-heres-list-of-devices-at-highest-risk-686112" jsname="YKoRaf">India warns Apple users of major cyber attack. Here's the list of devices at highest risk</a>

In one case, Hive's attack on a Midwestern hospital disrupted care during the height of the COVID-19 pandemic and forced institutions to pay a ransom before they could treat their patients, the Justice Department said.

The lucrative award for information was announced just weeks after US Attorney General Merrick Garland announced that the FBI had toppled the international ring, seizing its servers in California after more than a year of spying on the cybercriminals.&nbsp;

(With inputs from agencies)

The US Department of State Thursday (Feb 8) announced a reward of up to $10 million for information revealing the identity of the leaders of the Hive ransomware gang.

The US Department of State Thursday (Feb 8) announced a reward of up to $10 million for information revealing the identity of the leaders of the Hive ransomware gang. The department said it would also pay up to $5 million for info leading to the arrest and conviction of any of the members in any country. "Beginning in late July 2022, the FBI penetrated Hive's computer networks, obtained its decryption keys and offered them to victims worldwide, preventing victims from having to pay up to $130 million in ransoms demanded," the State Department said in a statement. The menace of the Hive ransomware gang According to the US government, the gang is responsible for targeting over 1,500 institutions in over 80 nations. The group, through its activities, has stolen over $100 million from school districts, financial firms and critical infrastructure. Watch: Digital warfare becomes new battlefront enabling rise in cyber influenced operations × Globally, several ransomware gangs operate from different nations, with total payments coughed up by victims surpassing the $1 billion mark in 20203. In the US alone, more than 2,200 hospitals, schools and government institutes were targeted in the last year, along with thousands of private firms. How does the gang operate? Hive ransomware gang designs malicious software which can infiltrate the computer networks of organisations by deploying various methods, including phishing emails. The group holds their users hostage and demands heavy payment in return for decryption keys to unlock the organisation’s system. Also read: India warns Apple users of major cyber attack. Here's the list of devices at highest risk In one case, Hive's attack on a Midwestern hospital disrupted care during the height of the COVID-19 pandemic and forced institutions to pay a ransom before they could treat their patients, the Justice Department said. The lucrative award for information was announced just weeks after US Attorney General Merrick Garland announced that the FBI had toppled the international ring, seizing its servers in California after more than a year of spying on the cybercriminals. (With inputs from agencies)

US announces $10mn award for information on Hive ransomware gang

Security researchers claimed to have uncovered a massive database leak, calling&nbsp;it the "Mother of all Breaches," which contained a staggering 26 billion records. This revelation, deemed one of the largest to date, consists of&nbsp;sensitive data from major platforms such as Twitter, Dropbox, LinkedIn, Tencent, Weibo, Adobe, Canva, and Telegram, Forbes reported.

<h2>What's the extent of the breach?</h2>

The database, a colossal 12 terabytes in size, was discovered on an unsecured page by researchers from Security Discovery and Cybernews. The sheer magnitude of the breach raises concerns about the potential consequences for the affected individuals, as it includes a vast array of personal information.

The research team believes that the database was likely compiled by a malicious actor or data broker. The aggregated data poses a significant threat, enabling threat actors to exploit it for various malicious activities. The potential risks include identity theft, advanced phishing schemes, targeted cyberattacks, and unauthorised access to personal and sensitive accounts.

<a href="https://www.wionews.com/india-news/data-lab-cyber-threats-in-healthcare-digital-india-and-the-need-to-beef-up-cyber-security-601894">Also read |&nbsp;Data Lab | Digital India and the need to beef up cyber-security in healthcare</a>

The leaked data extends its reach to major Chinese entities, such as Tencent and Weibo, amplifying the global scale of the breach. Equally alarming is the discovery that records from various US&nbsp;and other government organisations are part of the exposed data.

While a portion of the database comprises records from previous breaches and leaks, a concerning aspect is the inclusion of numerous username and password combinations. This element significantly heightens the risk of cybercriminals leveraging the data for malicious purposes, potentially leading to identity theft, sophisticated phishing attacks, and unauthorised access to sensitive accounts.

Cybersecurity experts stress on&nbsp;the importance of vigilance among potential victims, urging them to be aware of the potential consequences of compromised passwords.&nbsp;

In response to the situation, a LinkedIn spokesperson told WION, "We are working to fully investigate these claims, and we have seen no evidence that LinkedIn's systems were breached."

Also watch |&nbsp;Australia sanctions Russian hacker for role in 2022 Medibank cyberattack

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/australia-sanctions-russian-hacker-for-role-in-2022-medibank-cyberattack-682809/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

While a considerable part of the exposed data consists of compiled records from previous breaches, this breach's magnitude is unprecedented. Notably, in 2019, Verifications.io suffered a major breach, leaking nearly one billion records, considered one of the most significant breaches at the time. Other notable breaches include MySpace (360 million), Twitter (281 million), LinkedIn (251 million), and AdultFriendFinder (220 million).

(With inputs from agencies)

Security researchers claimed to have uncovered a massive database leak, calling it the "Mother of all Breaches," which contained a staggering 26 billion records.

Security researchers claimed to have uncovered a massive database leak, calling it the "Mother of all Breaches," which contained a staggering 26 billion records. This revelation, deemed one of the largest to date, consists of sensitive data from major platforms such as Twitter, Dropbox, LinkedIn, Tencent, Weibo, Adobe, Canva, and Telegram, Forbes reported. What's the extent of the breach? The database, a colossal 12 terabytes in size, was discovered on an unsecured page by researchers from Security Discovery and Cybernews. The sheer magnitude of the breach raises concerns about the potential consequences for the affected individuals, as it includes a vast array of personal information. The research team believes that the database was likely compiled by a malicious actor or data broker. The aggregated data poses a significant threat, enabling threat actors to exploit it for various malicious activities. The potential risks include identity theft, advanced phishing schemes, targeted cyberattacks, and unauthorised access to personal and sensitive accounts. Also read | Data Lab | Digital India and the need to beef up cyber-security in healthcare The leaked data extends its reach to major Chinese entities, such as Tencent and Weibo, amplifying the global scale of the breach. Equally alarming is the discovery that records from various US and other government organisations are part of the exposed data. While a portion of the database comprises records from previous breaches and leaks, a concerning aspect is the inclusion of numerous username and password combinations. This element significantly heightens the risk of cybercriminals leveraging the data for malicious purposes, potentially leading to identity theft, sophisticated phishing attacks, and unauthorised access to sensitive accounts. Cybersecurity experts stress on the importance of vigilance among potential victims, urging them to be aware of the potential consequences of compromised passwords. In response to the situation, a LinkedIn spokesperson told WION, "We are working to fully investigate these claims, and we have seen no evidence that LinkedIn's systems were breached." Also watch | Australia sanctions Russian hacker for role in 2022 Medibank cyberattack While a considerable part of the exposed data consists of compiled records from previous breaches, this breach's magnitude is unprecedented. Notably, in 2019, Verifications.io suffered a major breach, leaking nearly one billion records, considered one of the most significant breaches at the time. Other notable breaches include MySpace (360 million), Twitter (281 million), LinkedIn (251 million), and AdultFriendFinder (220 million). (With inputs from agencies)

Major data leak: 26 billion records exposed from platforms including Twitter and LinkedIn, report says

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties.&nbsp;

<h2>About the sanctions</h2>

In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web.&nbsp;

The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction.&nbsp;

WATCH |&nbsp;Australia sanctions Russian hacker for role in 2022 Medibank cyberattack

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/australia-sanctions-russian-hacker-for-role-in-2022-medibank-cyberattack-682809/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses.

This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021.&nbsp;

The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”.&nbsp;

“Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil.&nbsp;

She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.”&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/medibank-data-leak-hackers-now-release-info-related-to-abortion-533115">Medibank data leak: Australian police blame Russian hackers</a>

The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments.

O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil.&nbsp;

<h2>‘Single most devastating cyber-attack’</h2>

A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes.&nbsp;

In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese.

However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/australias-biggest-health-insurer-medibank-reports-huge-data-breach-527061">Australia's biggest health insurer Medibank reports huge data breach</a>

They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers.&nbsp;

The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures.

(With inputs from agencies) 
&nbsp;

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank.

Australia, on Tuesday (Jan 23) sanctioned a Russian man named Aleksandr Ermakov for his role in the country’s worst data breach, which impacted nearly 10 million customers of the insurer Medibank. Canberra announced first-of-its-kind sanctions which include a travel ban and financial penalties. About the sanctions In late 2022, Medibank, Australia’s largest private health insurer, disclosed that a hacker had stolen the personal information of 9.7 million current and former customers, and released the data on the dark web. The files published online included sensitive information about millions of Australians, including abortion records and treatment received for mental health or addiction. WATCH | Australia sanctions Russian hacker for role in 2022 Medibank cyberattack Australia has recently witnessed a spike in the number of cyber attacks, prompting the government to overhaul its cyber security rules last year and set up an agency to help coordinate responses. This is the first time that Australia has imposed its cyber sanctions following a framework which was legislated in 2021. The sanctions against Ermakov, 33, also include financial sanctions and a travel ban, said Home Affairs Minister Clare O’Neil during a press briefing, describing the Medibank hack as “the single most devastating cyber-attack we have experienced as a nation”. “Literally millions of people having personal data about themselves, their family members, taken from them and cruelly placed online for others to see,” said O’Neil. She added, “These people are cowards and they’re scumbags. They hide behind technology and today, the Australian government is saying that when we put our minds to it, we’ll unveil who you are, and we’ll make sure you are accountable.” ALSO READ | Medibank data leak: Australian police blame Russian hackers The sanctions imposed make it a criminal offence, punishable by up to 10 years in jail and fines, to provide Ermakov with any assets, including cryptocurrency wallets or ransomware payments. O'Neil also said that officials are still investigating the data breach and many more may face penalties. While not much is known about Ermakov, Australian intelligence authorities say he is part of the infamous Russian cyber-crime gang REvil. ‘Single most devastating cyber-attack’ A report by the Australian government, in November, showed that state-sponsored cyber groups and hackers had stepped up assaults on Australia's critical infrastructure, businesses and homes. In the Medibank breach, hackers stole login details which granted them access to all of the insurers’ customer data which included athletes, prominent media figures and even Australian Prime Minister Anthony Albanese. However, Medibank, with government support, refused to pay a multi-million dollar ransom after which the hackers published the data online. ALSO READ | Australia's biggest health insurer Medibank reports huge data breach They first released files named “good-list” and “naughty-list” which included records of treatment for mental health, addiction, drug abuse and sexually transmitted infections. These files also contained people’s names, addresses, birthdates, and government ID numbers. The hacker group which is said to be behind this breach also released a file named “abortions.csv” which comprised information about some customers’ end-of-pregnancy procedures. (With inputs from agencies)

Medibank breach: Russian hacker sanctioned for role in Australia’s biggest data theft

The attack on Kyivstar, Ukraine's largest electronic communications operator took out mobile and home internet service for as many as 24 million people in Ukraine.

Report: Russian hackers gained access to Kyivstar's system

Attack on Ukrainian telecom provider disrupted services for 24 mn people

Europe's most hazardous nuclear site Sellafield is facing a double trouble. On one hand a major leak of radioactive waste has made it a huge public risk and on the other the Guardian has confirmed that foreign cyber groups have compromised its online systems.

Europe's most dangerous nuclear site faces twin challenge: A leak and a cyberattack

Taiwan has been taking measures to counter espionage activities by China ahead of the presidential polls. The Democratic Progressive Party (DPP) had passed sweeping anti-espionage laws ahead of the 2020 election, after self-confessed Chinese spy Wang Liqiang told Australian media about China's espionage activities in Taiwan

Taiwan's crackdown on Chinese spies ahead of presidential polls

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial &amp; Commercial Bank of China Ltd. (ICBC), Bloomberg reported on Friday.&nbsp;

This disclosure by the world's largest lender by total assets has disrupted Treasury market trades, leading to the rerouting of transactions by brokers and traders. The incident has raised concerns globally, prompting cybersecurity experts to emphasise the urgency for banks to enhance their defence mechanisms.&nbsp;

LockBit has emerged as one of the most prolific ransomware gangs in recent years, conducting cyberattacks globally. The group's activities have been ongoing since at least the beginning of 2020, targeting up to 1,000 victims and extorting over $100 million in ransom demands, according to the US Justice Department. &nbsp;

LockBit operates as a "ransomware as a service" enterprise, where core hackers develop malware, and freelance cybercriminals sign up with LockBit to execute the attacks. The gang receives a commission, typically around 20 per cent of any ransom paid, showcasing a business-like approach to its illicit activities.&nbsp;

The devastating impact of LockBit's attacks extends beyond ICBC, affecting entities across Europe, the US, China, India, Indonesia, and Ukraine, as highlighted by cybersecurity firm Kaspersky. The gang's modus operandi involves using ransomware to infiltrate systems, holding them hostage and demanding payment for their release. Threats to leak compromised data often add pressure on victims to comply with the ransom demands.&nbsp;

Researchers studying LockBit's tactics note that the group regularly updates its malicious software to evade detection by cybersecurity products. LockBit's flexibility is evident in its experimentation with self-spreading malware, such as the LockBit Black strain, making infiltration easier for hackers without extensive technical expertise. The group's geographical base and the number of individuals involved remain unknown, but LockBit has asserted on its website that it refrains from attacking post-Soviet Union countries.&nbsp;

Since the Chinese government has previously prohibited cryptocurrency trading, criminal groups tend to avoid targeting the region as cryptocurrency is the most favoured payment method for hackers. The historical alignment of China with Russia has also made it a less attractive target for those with Russian affiliations. However, LockBit’s recent attack on ICBC challenges this notion.

Cybersecurity experts speculate that if targeting proves to be a mistake, LockBit might assist in the recovery by offering free decryption, a gesture they have made in previous incidents involving incorrect victims.

(With inputs from Bloomberg)&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial & Commercial Bank of China Ltd.

LockBit, a notorious ransomware gang, known for a series of high-profile cyberattacks, has sent shockwaves through the financial world with its recent breach of Industrial & Commercial Bank of China Ltd. (ICBC), Bloomberg reported on Friday. This disclosure by the world's largest lender by total assets has disrupted Treasury market trades, leading to the rerouting of transactions by brokers and traders. The incident has raised concerns globally, prompting cybersecurity experts to emphasise the urgency for banks to enhance their defence mechanisms. LockBit has emerged as one of the most prolific ransomware gangs in recent years, conducting cyberattacks globally. The group's activities have been ongoing since at least the beginning of 2020, targeting up to 1,000 victims and extorting over $100 million in ransom demands, according to the US Justice Department. LockBit operates as a "ransomware as a service" enterprise, where core hackers develop malware, and freelance cybercriminals sign up with LockBit to execute the attacks. The gang receives a commission, typically around 20 per cent of any ransom paid, showcasing a business-like approach to its illicit activities. The devastating impact of LockBit's attacks extends beyond ICBC, affecting entities across Europe, the US, China, India, Indonesia, and Ukraine, as highlighted by cybersecurity firm Kaspersky. The gang's modus operandi involves using ransomware to infiltrate systems, holding them hostage and demanding payment for their release. Threats to leak compromised data often add pressure on victims to comply with the ransom demands. Researchers studying LockBit's tactics note that the group regularly updates its malicious software to evade detection by cybersecurity products. LockBit's flexibility is evident in its experimentation with self-spreading malware, such as the LockBit Black strain, making infiltration easier for hackers without extensive technical expertise. The group's geographical base and the number of individuals involved remain unknown, but LockBit has asserted on its website that it refrains from attacking post-Soviet Union countries. Since the Chinese government has previously prohibited cryptocurrency trading, criminal groups tend to avoid targeting the region as cryptocurrency is the most favoured payment method for hackers. The historical alignment of China with Russia has also made it a less attractive target for those with Russian affiliations. However, LockBit’s recent attack on ICBC challenges this notion. Cybersecurity experts speculate that if targeting proves to be a mistake, LockBit might assist in the recovery by offering free decryption, a gesture they have made in previous incidents involving incorrect victims. (With inputs from Bloomberg) WATCH WION LIVE HERE

LockBit ransomware gang strikes ICBC, sends shockwaves through financial markets

Indian Space Research Organisation, ISRO, faces over 100 cyber-attacks daily. With the risk of cyber-attacks being much higher in rocket technology, the chairman of ISRO has said that India's space agency faces more than 100 cyber attacks on a daily basis. Interestingly the possibility of cyber attacks is much higher in rocket technology.

Indian space agency ISRO fights over 100 cyber attacks every day

Bharatpur (Rajasthan) and Mathura (Uttar Pradesh) have crossed Jamtara (Jharkhand) and Nuh (Haryana) as infamous cybercrime hotspots in India, a new study revealed.

Bharatpur (Rajasthan) and Mathura (Uttar Pradesh) have crossed Jamtara (Jharkhand) and Nuh (Haryana) as infamous cybercrime hotspots in India, a new study revealed. The study also said the top 10 districts in the list directly contribute to 80 per cent of cybercrime in the nation. The Future Crime Research Foundation (FCRF), a non-profit IIT Kanpur-incubated start-up, mentioned these findings in its latest comprehensive white paper, A Deep Dive Into Cybercrime Trends Impacting India. Below is the list of the cities contributing to the highest cybercrime cases in India, collectively accounting for 80 per cent of reported events, the FCRF claimed. Bharatpur: 18 per cent Mathura: 12 per cent Nuh: 11 per cent Deoghar: 10 per cent Jamtara: 9.6 per cent Gurugram: 8.1 per cent Alwar: 5.1 per cent Bokaro: 2.4 per cent Karma Tand: 2.4 per cent Giridih: 2.3 per cent "Our analysis focuses on the top 10 districts in India that are most prone to cybercrime. As identified in the white paper, understanding the key factors contributing to cybercrime in these districts is essential for devising effective prevention and mitigation strategies," FCRF co-founder Harshvardhan Singh told PTI. ALSO READ | Apple aims to boost manufacturing and invest $40 billion in India: Report Analysis revealed several similarities between the top 10 Indian cybercrime hubs, including geographical proximity to urban centres, limited cyber security infrastructure, economic challenges and low digital literacy, said Singh. "Addressing these factors through targeted awareness campaigns, law enforcement resources, and educational initiatives is crucial to reducing cybercrime rates in these districts and enhancing the overall cyber security landscape of India," he added. The FCRF study also mentioned that the emerging new hotspots require the same amount of attention and proactive actions as the established cybercrime hubs that continue to pose significant threats. The new cybercrime hubs are typically those regions where various types of digital criminal activity are rising, often catching law-enforcement agencies and the public off guard. The non-profit organisation ascribed the rise in such occurrences to a complex interaction of several variables. They included low technological hurdles that allow people with little knowledge to engage in such operations using easily accessible hacking tools and malware. Law enforcement agencies face difficulty tracing cybercriminals with fake identities due to inadequate Know Your Customer (KYC) verification processes on online platforms. The easy availability of faked accounts and rented SIM cards on the black markets allows thugs to operate anonymously, creating a challenge for the authorities to track and prosecute them, the study stated. Another added advantage for cybercriminals nowadays is the affordability of AI-driven cyberattack tools that provide automation and expansion of the attack. Furthermore, virtual private networks (VPNs) give anonymity to cybercriminals, making it hard for the authorities to find their location. The FCRF study also flagged that the growing pool of potential criminals typically consists of unemployed or underemployed individuals. (With inputs from agencies) WATCH WION LIVE HERE

Infamous cybercrime hubs of India: Mathura and Bharatpur pip Jamtara and Nuh, says study

According to a Microsoft report, Chinese state-linked hackers have secretly accessed the email accounts of around 25 organizations in a sweeping cyber Espionage campaign.

Chinese spies accuse of worldwide cyber espionage

The Indian army and educational institutions are experiencing persistent cyber attacks from a Pakistan-based group. What does Pakistan want from the Indian army? Molly Gambhir tells you how.

Gravitas: Pakistan hits Indian army with cyber attacks

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an <a href="https://go.checkpoint.com/2023-cyber-security-report/chapter-03.php">analysis </a>by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

The latest cyber-attack on India’s premier&nbsp;medical institution, the All India Institute of Medical Science&nbsp;(AIIMS), New Delhi,&nbsp;the <a href="https://www.wionews.com/india-news/aiims-says-malware-attack-successfully-thwarted-by-cyber-security-systems-601396">second such attack in a row</a> has rekindled discussion over India's&nbsp;preparedness&nbsp;to deal with attacks of the given nature.&nbsp;AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered.&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe aria-label="Grouped Bars" data-external="1" frameborder="0" height="546" id="datawrapper-chart-7Exvx" scrolling="no" src="https://datawrapper.dwcdn.net/7Exvx/1/" style="border: none;" title="Avg weekly cyber attacks per organisation by sector in 2022 (Globally)" width="600"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<h2 dir="ltr">Why is India being targetted?</h2>

Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies.

“The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION.

<h2 dir="ltr">India’s healthcare sector a constant target? Why is health-related data so critical?</h2>

A nationwide initiative to <a href="https://main.mohfw.gov.in/sites/default/files/17739294021483341357.pdf">digitise medical data</a> was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records.&nbsp;

“Healthcare data is a prime target for <a href="https://www.wionews.com/india-news/delhis-bigest-cyber-fraud-doctor-duped-of-rs-45-crore-548k-via-skype-calls-594502">cyber-criminals</a> due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G.

He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks.&nbsp;

Also watch |&nbsp;Second malware attack at AIIMS, New Delhi&nbsp;

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/second-malware-attack-at-aiims-new-delhi-cyber-attack-india-news-601464/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<h2 dir="ltr">Digitalisation and the risk of cyber-crimes</h2>

As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation.

“The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said.&nbsp;

<h2>Way forward</h2>

Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case?

“To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains.&nbsp;

The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the <a href="https://www.meity.gov.in/writereaddata/files/DIA_Presentation%2009.03.2023%20Final.pdf">digital India Act</a>.

 
WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst. The latest cyber-attack on India’s premier medical institution, the All India Institute of Medical Science (AIIMS), New Delhi, the second such attack in a row has rekindled discussion over India's preparedness to deal with attacks of the given nature. AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered. × Why is India being targetted? Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies. “The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION. India’s healthcare sector a constant target? Why is health-related data so critical? A nationwide initiative to digitise medical data was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records. “Healthcare data is a prime target for cyber-criminals due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G. He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks. Also watch | Second malware attack at AIIMS, New Delhi Digitalisation and the risk of cyber-crimes As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation. “The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said. Way forward Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case? “To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains. The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the digital India Act. WATCH WION LIVE HERE:

Data Lab | Digital India and the need to beef up cyber-security in healthcare

India's National Security Board is conducting cyber defense exercises in the wake of threats from China and other adversaries mounting by the day. The agencies including India's TRAI services are participating in the week-long exercise to test the resilience of India's civilian and Military infrastructure. The cyber security exercises are being held under the ages of India's defense cyber agency with participants aiming to test the firewalls guarding India's critical infrastructure.

India gears up to deal with cyber threats

Cyber security has become a huge issue in the past few years with several companies and countries falling victim&nbsp;to&nbsp; cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem. Now, a new report on cyber security has warned that in the coming two years cyber attacks might pose an unprecedented threat.&nbsp;&nbsp;

The World Economic Forum (WEF) Global Security Outlook Report 2023 has predicted that a “catastrophic cyber event" is on the way and will hit us in the "near future". WEF managing director Jeremy Jurgens, during a presentation, said that "geopolitical instability makes a catastrophic cyber event likely in the next two years". Jurgens said that the prediction comes from 93 per cent of cyber leaders, and 86 per cent of cyber business leaders. "This far exceeds anything that we’ve seen in previous surveys.”

Talking about cyber security, Jurgens referred to a recent cyberattack that aimed to shut down Ukrainian military abilities, but unexpectedly led to closing off of parts of electricity production across Europe.&nbsp;

Secretary-General of Interpol, Jürgen Stock, was also present and called it "a global threat". “It calls for a global response and enhanced and coordinated action.” He urged multiple bad “actors” who benefit from cybercrime to encourage world leaders to work together to thwart all such efforts.&nbsp;

Also Read |&nbsp;<a href="https://www.wionews.com/world/russia-alleges-us-of-training-ukrainian-it-army-recruiting-hackers-556807">Russia accuses US of training ‘Ukrainian IT Army’</a>

Albania, one of the countries that fell prey to a massive cyberattack recently, has now been working with larger allies to fight cyber criminals. Edi Rama, Albania’s prime minister, came up with some shocking numbers at the presentation, saying that if cybercrime was a state, it would be the third largest global economy after the US and China. Rama said that the cybercrime industry stood at $3 trillion in 2015 and is expected to grow to $10.5 trillion in 2025.&nbsp;

Rama compared the predicted cyberattack to a virus like Covid-19 and how it can turn to an "apocalypse".

“Let’s imagine an exponential multitude of viruses that mutate everyday exponentially while not threatening our body, but the bodies we live in, our organisations, our countries, our system, then, you know, it could be just apocalypse. It’s about viruses that can not only block our way of living, but can control it and deviate it.”

(With inputs from agencies)

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Cyber security has become a huge issue in the past few years with several companies and countries falling victim to cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem.

Cyber security has become a huge issue in the past few years with several companies and countries falling victim to cyber attacks. Everyone who has been affected or is at risk of being affected by cyber attacks has been trying to deal with the problem. Now, a new report on cyber security has warned that in the coming two years cyber attacks might pose an unprecedented threat. The World Economic Forum (WEF) Global Security Outlook Report 2023 has predicted that a “catastrophic cyber event" is on the way and will hit us in the "near future". WEF managing director Jeremy Jurgens, during a presentation, said that "geopolitical instability makes a catastrophic cyber event likely in the next two years". Jurgens said that the prediction comes from 93 per cent of cyber leaders, and 86 per cent of cyber business leaders. "This far exceeds anything that we’ve seen in previous surveys.” Talking about cyber security, Jurgens referred to a recent cyberattack that aimed to shut down Ukrainian military abilities, but unexpectedly led to closing off of parts of electricity production across Europe. Secretary-General of Interpol, Jürgen Stock, was also present and called it "a global threat". “It calls for a global response and enhanced and coordinated action.” He urged multiple bad “actors” who benefit from cybercrime to encourage world leaders to work together to thwart all such efforts. Also Read | Russia accuses US of training ‘Ukrainian IT Army’ Albania, one of the countries that fell prey to a massive cyberattack recently, has now been working with larger allies to fight cyber criminals. Edi Rama, Albania’s prime minister, came up with some shocking numbers at the presentation, saying that if cybercrime was a state, it would be the third largest global economy after the US and China. Rama said that the cybercrime industry stood at $3 trillion in 2015 and is expected to grow to $10.5 trillion in 2025. Rama compared the predicted cyberattack to a virus like Covid-19 and how it can turn to an "apocalypse". “Let’s imagine an exponential multitude of viruses that mutate everyday exponentially while not threatening our body, but the bodies we live in, our organisations, our countries, our system, then, you know, it could be just apocalypse. It’s about viruses that can not only block our way of living, but can control it and deviate it.” (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

An 'apocalypse': Report warns of a 'catastrophic cyber event' in next two years

Over the course of 2022, businesses in the UK saw 788 cyberattacks a week on average. This is an increase of 77% from 2021. The latest statistics show that sophisticated ransomware gangs are mostly to blame for the rising concerns about cyberattacks.

Reports: Cyber attacks on UK organisations surged 77% in 2022

Following news of a Russian financed ransomware gang assaulting a corporation that plays a major part in Britain's Financial System, stock trading in London has been thrown into pandemonium.

UK: Cyber attack on software provider disrupts trading of shares

The ransomware attack on the servers of the<a href="https://www.wionews.com/india-news/delhi-aiims-ransomware-attack-china-involvement-suspected-data-of-vvips-including-politicians-at-risk-539455"> All India Institute of Medical Sciences (AIIMS), Delhi</a> was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source. It added that of the 100 servers, five physical servers were successfully infiltrated by the hackers.&nbsp;

"AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers has been successfully retrieved now," the source from the Union health ministry told ANI on Wednesday.&nbsp;

The personal details of millions of patients in AIIMS Delhi were at risk due to the ransomware attack last month. In December, a special cell of the Delhi Police launched an investigation into the attack.&nbsp;

The investigations found that the IP addresses of two emails identified from the headers of files encrypted by the hackers originated from Hong Kong and China’s Henan province. 
Meanwhile, authorities from AIIMS said in a statement that the e-hospital data was restored.&nbsp;

"The e-hospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and a large number of servers/computers for the hospital services. Measures are being taken for cyber security," the statement said.&nbsp;

It added all hospital services, including outpatient, in-patient, laboratories, etc., continue to run on manual mode.&nbsp; 
 
AIIMS, Delhi, faced the cyberattack on November 23 after which a case of extortion and cyber terrorism was registered by the Delhi Police on November 25. The internet services were blocked as per the recommendations of the investigating agencies.&nbsp;

Computer Emergency Response Team (CERT-In), Delhi cybercrime special cell, Indian Cybercrime Coordination Centre, Intelligence Bureau, CBI and National Investigation Agency, are investigating the ransomware attack that is feared to have compromised the records of nearly four crore patients. 
&nbsp;

(With inputs from ANI)&nbsp;

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The ransomware attack on the servers of the All India Institute of Medical Sciences (AIIMS), Delhi was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source.

The ransomware attack on the servers of the All India Institute of Medical Sciences (AIIMS), Delhi was carried out by Chinese hackers, news agency ANI reported on Wednesday citing a government source. It added that of the 100 servers, five physical servers were successfully infiltrated by the hackers. "AIIMS Delhi server attack was by the Chinese, FIR details that the attack had originated from China. Of 100 servers (40 physical and 60 virtual), five physical servers were successfully infiltrated by the hackers. The damage would have been far worse but is now contained. Data in the five servers has been successfully retrieved now," the source from the Union health ministry told ANI on Wednesday. The personal details of millions of patients in AIIMS Delhi were at risk due to the ransomware attack last month. In December, a special cell of the Delhi Police launched an investigation into the attack. The investigations found that the IP addresses of two emails identified from the headers of files encrypted by the hackers originated from Hong Kong and China’s Henan province. Meanwhile, authorities from AIIMS said in a statement that the e-hospital data was restored. "The e-hospital data has been restored on the servers. The network is being sanitized before the services can be restored. The process is taking some time due to the volume of data and a large number of servers/computers for the hospital services. Measures are being taken for cyber security," the statement said. It added all hospital services, including outpatient, in-patient, laboratories, etc., continue to run on manual mode. AIIMS, Delhi, faced the cyberattack on November 23 after which a case of extortion and cyber terrorism was registered by the Delhi Police on November 25. The internet services were blocked as per the recommendations of the investigating agencies. Computer Emergency Response Team (CERT-In), Delhi cybercrime special cell, Indian Cybercrime Coordination Centre, Intelligence Bureau, CBI and National Investigation Agency, are investigating the ransomware attack that is feared to have compromised the records of nearly four crore patients. (With inputs from ANI) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Delhi AIIMS ransomware attack carried out by hackers from China, Hong Kong: Report

According to the government sources, the attack on the computer system of the All India Institute of Medical Sciences in Delhi originated from China. Watch this video to know more.

WION Dispatch: China behind AIIMS Delhi server attack?

Last month, a ransomware attack compromised the personal data of approximately five million passengers and all Air Asia employees. Malaysian authorities are still investigating the source and the overall impact but have gathered few leads so far.

Malaysia launches investigation into low-cost airline Air Asia ransomware attack

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday. Meanwhile, a preliminary investigation has been opened based on the hospital’s formal complaint.&nbsp;

Authorities at the Hospital Centre of Versailles which also includes Andre-Mignot Hospital, Richaud Hospital and the Despagne Retirement Home, said that they were affected by the hacking attempt. According to France’s Regional Health Agency (ARS), while the&nbsp;Andre-Mignot Hospital&nbsp;has suspended operations it is working to keep the walk-in services and consultations running.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/vanuatu-island-hit-by-ransom-attack-cripples-government-535355">Vanuatu island hit by ransom attack, cripples government</a>

Furthermore, the French minister for social affairs and health, Francois Braun, also visited the hospital and said three patients from intensive care and three from the neonatal unit were transferred and others might follow, said a report by AFP.&nbsp;&nbsp;

The hospital required additional staff for the intensive care unit (ICU) as&nbsp;the machines were working but they needed someone to monitor them since they were no longer a part of the network, said the health minister. He also spoke about how the incident has led to a complete “reorganization of the hospital”.&nbsp;&nbsp;

ALSO WATCH:&nbsp;<a href="https://www.wionews.com/videos/gravitas-ransomware-attack-on-aiims-server-is-the-world-prepared-to-fight-a-cyber-war-537227">Gravitas | 'Ransomware' attack on AIIMS server: Is the world prepared to fight a cyber war?</a>

Earlier this year, another hospital just outside Paris also witnessed a cyber attack and took several weeks to recover before it got back to normal functioning. 
 
The Corbeil-Essonnes hospital was asked for a $10 million ransom which was later lowered to two million dollars. The hackers had given September 23 as the deadline after which they posted confidential files on the staff and patients on the dark web.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/india-news/delhi-aiims-ransomware-attack-china-involvement-suspected-data-of-vvips-including-politicians-at-risk-539455">Delhi AIIMS ransomware attack: China involvement suspected, data of VVIPs, celebrities at risk</a>

France’s hospitals and health systems have recently witnessed “daily attacks”, said Braun. He added that most of these attempts have been prevented. Meanwhile, the prosecutor's office in Paris has opened a preliminary investigation after the hospital filed a formal complaint into hacking state data and attempted extortion, reported AFP.&nbsp; 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday.

Over the weekend, a hospital complex near France’s capital Paris, in Versailles was forced to shut its operations and transfer at least six patients after a cyber attack, said France's health ministry on Sunday. Meanwhile, a preliminary investigation has been opened based on the hospital’s formal complaint. Authorities at the Hospital Centre of Versailles which also includes Andre-Mignot Hospital, Richaud Hospital and the Despagne Retirement Home, said that they were affected by the hacking attempt. According to France’s Regional Health Agency (ARS), while the Andre-Mignot Hospital has suspended operations it is working to keep the walk-in services and consultations running. ALSO READ | Vanuatu island hit by ransom attack, cripples government Furthermore, the French minister for social affairs and health, Francois Braun, also visited the hospital and said three patients from intensive care and three from the neonatal unit were transferred and others might follow, said a report by AFP. The hospital required additional staff for the intensive care unit (ICU) as the machines were working but they needed someone to monitor them since they were no longer a part of the network, said the health minister. He also spoke about how the incident has led to a complete “reorganization of the hospital”. ALSO WATCH: Gravitas | 'Ransomware' attack on AIIMS server: Is the world prepared to fight a cyber war? Earlier this year, another hospital just outside Paris also witnessed a cyber attack and took several weeks to recover before it got back to normal functioning. The Corbeil-Essonnes hospital was asked for a $10 million ransom which was later lowered to two million dollars. The hackers had given September 23 as the deadline after which they posted confidential files on the staff and patients on the dark web. ALSO READ | Delhi AIIMS ransomware attack: China involvement suspected, data of VVIPs, celebrities at risk France’s hospitals and health systems have recently witnessed “daily attacks”, said Braun. He added that most of these attempts have been prevented. Meanwhile, the prosecutor's office in Paris has opened a preliminary investigation after the hospital filed a formal complaint into hacking state data and attempted extortion, reported AFP. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

French hospital forced to suspend operations, transfer patients after cyberattack

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister,&nbsp;one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said.

The Pacific island nation of 314,000 inhabitants and 80 islands has experienced delays in communication and coordination as a result of the malware attack on state networks.&nbsp;

To get government phone numbers, people turned to the internet Yellow Pages or the printed phone book. Some offices were hiding their Twitter and Facebook accounts.

According to a financial analyst who closely collaborates with the ministry's cybersecurity staff, the issues started approximately a month ago when suspected phishing activity was first discovered in emails sent to the Ministry of Finance.&nbsp;

Almost all government email and website archives were destroyed by malware. As opposed to web servers or the cloud, many departments continued to keep data on local hard drives.&nbsp;

Also Read:<a href="https://www.wionews.com/world/iran-more-than-300-dead-in-protests-sparked-by-aminis-death-says-irgc-general-538527">&nbsp;Iran: More than 300 dead in protests sparked by Amini's death, says IRGC general</a>

Whether the hackers demanded a ransom has not been made public by the government.&nbsp;

Inadvertent solutions have been used to improve communication between agencies and departments as government departments have struggled to keep linked, frustrating authorities.&nbsp;

Service delays at several government offices on outer islands are severe.

(with inputs from agencies)

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister, one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said.

Frustrated officials still using private Gmail accounts, personal laptops, pen and paper, and typewriters to run the government of the prime minister, one month after a cyber-attack brought down government servers and websites in Vanuatu, Ishmael Kalsakau, who took office just a few days after the crash said. The Pacific island nation of 314,000 inhabitants and 80 islands has experienced delays in communication and coordination as a result of the malware attack on state networks. To get government phone numbers, people turned to the internet Yellow Pages or the printed phone book. Some offices were hiding their Twitter and Facebook accounts. According to a financial analyst who closely collaborates with the ministry's cybersecurity staff, the issues started approximately a month ago when suspected phishing activity was first discovered in emails sent to the Ministry of Finance. Almost all government email and website archives were destroyed by malware. As opposed to web servers or the cloud, many departments continued to keep data on local hard drives. Also Read: Iran: More than 300 dead in protests sparked by Amini's death, says IRGC general Whether the hackers demanded a ransom has not been made public by the government. Inadvertent solutions have been used to improve communication between agencies and departments as government departments have struggled to keep linked, frustrating authorities. Service delays at several government offices on outer islands are severe. (with inputs from agencies)

Vanuatu officials using pen and paper to run government, one month after cyber attack

In the case of suspected cyberattack, the tire-maker Continental, it is investigating theft of company data. However, company declined to comment so far on reports that hackers had put up any information for sale

World Business Watch: Continental investigates cyberattack; data up for sale for $50 mn, say reports

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale.

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<blockquote class="twitter-tweet">
In a case of a suspected cyberattack, tyre maker <a href="https://twitter.com/hashtag/Continental?src=hash&amp;ref_src=twsrc%5Etfw">#Continental</a> is investigating theft of company's data. Reportedly, the budget, investment and strategy plans were leaked.<a href="https://twitter.com/joinsumit?ref_src=twsrc%5Etfw">@joinsumit</a> tells you more 
 
Watch more: <a href="https://t.co/AXC5qRuO3J">https://t.co/AXC5qRuO3J</a> <a href="https://t.co/6LcIjNiW2P">pic.twitter.com/6LcIjNiW2P</a>
— WION (@WIONews) <a href="https://twitter.com/WIONews/status/1592747932356603905?ref_src=twsrc%5Etfw">November 16, 2022</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The manufacturer said its investigation was moving ahead with the highest priority.

What is Continental data leak row all about?

German news outlet Handelsblatt reported on November 7 that a group of hackers, named 'Lockbit 3.0', tapped into Continental's data. About 40 terabytes of data was reportedly stolen in&nbsp;the cyber attack in August. The hackers reportedly demanded a ransom from Continental which the mobility solutions-major "apparently did not want to pay". Following this, the hackers put the data for sale for $50 million, Handelsblatt reported.

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/millions-of-personal-data-leaked-online-after-medibank-refuses-to-pay-ransom-532442">Millions of personal data leaked online after Medibank refuses to pay ransom</a>

Earlier on Tuesday business daily Handelsblatt reported that hackers had published a list of the data on the 'dark net' and that it included budget, investment and strategy plans, as well as information related to some Continental customers.

What Continental is doing about data leak?

The company has launched an investigation into the incident "with the support of external cybersecurity experts", according to a spokesperson's comment. German prosecutors are also investigating the attack to nab the hackers.&nbsp;

WATCH |&nbsp;<a href="https://www.wionews.com/videos/chinas-data-breach-of-over-1-billion-people-key-details-494945">China’s data breach of over 1 billion people: Key details</a>

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/chinas-data-breach-of-over-1-billion-people-key-details-494945/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

Continental sold automotive solutions worth $22.4 billion in 2021. It ranks number eight on the list of top 100 global automotive&nbsp;suppliers, compiled by Michigan-based weekly newspaper Automotive News.&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale.

German tyre-maker and mobility solutions-major Continental said on Tuesday that it was investigating the theft of company's data in a cyberattack. The Hanover-based company, however, declined to comment on reports that hackers had put the information up for sale. In a case of a suspected cyberattack, tyre maker #Continental is investigating theft of company's data. Reportedly, the budget, investment and strategy plans were leaked.@joinsumit tells you more Watch more: https://t.co/AXC5qRuO3J pic.twitter.com/6LcIjNiW2P — WION (@WIONews) November 16, 2022 × The manufacturer said its investigation was moving ahead with the highest priority. What is Continental data leak row all about? German news outlet Handelsblatt reported on November 7 that a group of hackers, named 'Lockbit 3.0', tapped into Continental's data. About 40 terabytes of data was reportedly stolen in the cyber attack in August. The hackers reportedly demanded a ransom from Continental which the mobility solutions-major "apparently did not want to pay". Following this, the hackers put the data for sale for $50 million, Handelsblatt reported. ALSO READ | Millions of personal data leaked online after Medibank refuses to pay ransom Earlier on Tuesday business daily Handelsblatt reported that hackers had published a list of the data on the 'dark net' and that it included budget, investment and strategy plans, as well as information related to some Continental customers. What Continental is doing about data leak? The company has launched an investigation into the incident "with the support of external cybersecurity experts", according to a spokesperson's comment. German prosecutors are also investigating the attack to nab the hackers. WATCH | China’s data breach of over 1 billion people: Key details × Continental sold automotive solutions worth $22.4 billion in 2021. It ranks number eight on the list of top 100 global automotive suppliers, compiled by Michigan-based weekly newspaper Automotive News. WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

German firm Continental targeted by hackers, launches probe after report says data up for sale

Cyber attacks against Australia from criminals and state-sponsored groups jumped last financial year, with a government report released on Friday equating the assault to one attack every seven minutes.

WION Business News | Australia: One cyber attack every seven minutes

After a recent spike in cyber attacks in Australia. The latest is that a communications platform used by the Australian military personnel and defence staff has come under ransomware attack.

Australia: Hackers hit defence communications platform, to increase penalties for data breaches

In the latest string of cyber attacks, Medibank says data of 4 million customers was accessed after a ransomware attack. Watch this report for all the details.

Australia: Medibank says data of 4 million customers accessed

One of the largest Australian private health insurance providers has been hit by a “cyber incident”. Medibank Group detected unusual activity on its network on Wednesday and subsequently took immediate steps to contain the incident.

World Business Watch: Australia's Medibank reports ‘cyber incident’ following suspicious activity

cyber-attack

Cyber Attack, News on Cyber Attack, stories on Cyber Attack, articles on Cyber Attack, Cyber Attack stories at Wion, Cyber Attack news, Cyber Attack latest news