The recently disclosed Chinese hack of senior officials at the US&nbsp;State and Commerce departments stemmed from the compromise of a Microsoft engineer’s corporate account, Microsoft Corp said in a blog post on Wednesday.

Microsoft&nbsp;said the engineer’s account had been penetrated by a hacking group it dubs Storm-0558, which is alleged to have stolen hundreds of thousands of emails from top American officials including Commerce Secretary Gina Raimondo, U.S. Ambassador to China Nicholas Burns and Assistant Secretary of State for East Asia Daniel Kritenbrink.

The blog post addressed some unanswered questions around the incident, which drew fresh scrutiny to&nbsp;Microsoft’s security and led to calls to investigate the company’s practices.

Notably, the post explained how hackers were able to extract a cryptographic key from the engineer’s account and use it to access email accounts that it should not have given them access to.

Microsoft&nbsp;said it had fixed the flaws that led to the key being accessible from the unidentified engineer’s account which gave the hackers such wide latitude to steal emails. 
 
&nbsp;Microsoft&nbsp;representative said the engineer’s account had been hit using “token-stealing malware” but did not provide further detail about the incident or its timing.

The Chinese Embassy in Washington did not immediately return an email. Beijing has previously described the allegation that it stole emails from top U.S. officials as “groundless narratives.” 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

The recently disclosed Chinese hack of senior officials at the US State and Commerce departments stemmed from the compromise of a Microsoft engineer’s corporate account, Microsoft Corp said in a blog post on Wednesday.

The recently disclosed Chinese hack of senior officials at the US State and Commerce departments stemmed from the compromise of a Microsoft engineer’s corporate account, Microsoft Corp said in a blog post on Wednesday. Microsoft said the engineer’s account had been penetrated by a hacking group it dubs Storm-0558, which is alleged to have stolen hundreds of thousands of emails from top American officials including Commerce Secretary Gina Raimondo, U.S. Ambassador to China Nicholas Burns and Assistant Secretary of State for East Asia Daniel Kritenbrink. The blog post addressed some unanswered questions around the incident, which drew fresh scrutiny to Microsoft’s security and led to calls to investigate the company’s practices. Notably, the post explained how hackers were able to extract a cryptographic key from the engineer’s account and use it to access email accounts that it should not have given them access to. Microsoft said it had fixed the flaws that led to the key being accessible from the unidentified engineer’s account which gave the hackers such wide latitude to steal emails. Microsoft representative said the engineer’s account had been hit using “token-stealing malware” but did not provide further detail about the incident or its timing. The Chinese Embassy in Washington did not immediately return an email. Beijing has previously described the allegation that it stole emails from top U.S. officials as “groundless narratives.” WATCH WION LIVE HERE

Microsoft says hackers penetrated its engineer's account to steal emails of US officials

According to Polish media, the country's railways were the target of a hacking attack by Polish intelligence agencies. The Polish Press Agency (PAP) stated on Saturday that hackers broke into railway frequencies to disrupt traffic in the country's northwest during the course of the night.

Poland investigates hacking attack on state railway network

High-risk warnings and concerns are being raised for Android 13 and the prior versions that could allow hackers to access many vulnerable devices. The computer Emergency Response Team operating under the ministry of electronics and information technology government of India has strictly issued this warning that mischievous mines and cybercriminals would try their best to access sensitive information or even disrupt operations.

Android devices are at high risk of hacking

Republican US Representative Don Bacon said late Monday that the Federal Bureau of Investigation (FBI) had issued a warning that his emails had been hacked by Chinese spies, with both personal and campaign messages compromised, in addition to reading the emails of State Department workers.

US Congressman Don Bacon says Chinese spies hacked his emails

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

"Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology.

"We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters.

In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks.&nbsp;

Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month.

Also read: <a href="https://www.wionews.com/world/maui-wildfires-death-toll-rises-to-53-president-joe-biden-declares-it-major-disaster-624392">Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’</a>

He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation.

The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security.

The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge.

"Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said.

The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said.

(With inputs from agencies) 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure.

The White House on Wednesday released a statement saying that it had come up with a multimillion-dollar cyber contest to stimulate the use of artificial intelligence (AI) in order to find out and fix flaws in the security system of the United States government infrastructure. "Cybersecurity is a race between offence and defence," said Anne Neuberger, the U.S. government's deputy national security adviser for cyber and emerging technology. "We know malicious actors are already using AI to accelerate identifying vulnerabilities or build malicious software," she added in a statement to Reuters. In recent times, several organisations in the United States, from healthcare groups to manufacturing firms and government institutions, have been a victim of hacking attacks. Neuberger's comments about artificial intelligence were somewhat similar to those made by Canada's cybersecurity head Samy Khoury last month. Also read: Maui wildfires death toll rises to 55, President Joe Biden declares it ‘major disaster’ He said that his agency had witnessed AI being deployed for things like creating phishing emails, writing malicious computer code and spreading disinformation. The White House released a statement saying that the two-year contest includes around $20 million in rewards and will be ushered by the Defense Advanced Research Projects Agency (DARPA), the United States government body which is in charge of creating technologies for national security. The government said that the tech giants at the forefront of the AI revolution which include Alphabet's Google, Anthropic, Microsoft, and OpenAI, will make their systems available for the challenge. "Our goal with the DARPA AI challenge is to catalyze a larger community of cyber defenders who use the participating AI models to race faster – using generative AI to bolster our cyber defences," Neuberger said. The Open Source Security Foundation (OpenSSF), a US group of experts attempting to enhance open source software security, will be in charge of guaranteeing the "winning software code is put to use right away," the US government said. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

White House to launch AI-based contest aimed at fixing flaws in security systems

Now cyber attacks are becoming increasingly common and more sophisticated around the world. This is the latest with the help of AI hackers can simply talk computers into misbehaving. Johann Rehberger, a security researcher, manipulated OpenAI's chatbot ChatGPT to do something bad like making ChatGPT read his email summarize it and post his personal information on the internet. Keep watching to know more.

Artificial Intelligence can manipulate computers into misbehaving

North Korean hackers stealthily put digital backdoors into the systems of a significant Russian missile manufacturer in late 2021. According to reports, the intrusion went undetected until May 2022, when NPO Mashinostroyeniya's IT engineers discovered it. A few weeks have passed since the Russian defense minister visited North Korea and spoke with Kim Jong-un.

North Korean hackers attacked systems of Russian missile maker: Report | WION World DNA

Japan's largest maritime port - the port of Nagoya - suffered a significant disruption due to a cyber attack allegedly by the Russian group - Lockwood. The hackers allegedly demanded a ransom to restore control of the system to the port operator.

Russian hackers demand ransom to restore systems after targeting Japan's port

LetMeSpy, a spyware used to discreetly monitor a phone's data and location has been hacked, say media reports. The hackers have reportedly hacked the servers of LetMeSpy and deleted the data of thousands of users.

The phone monitoring app said on its login page on June 21 that “a security incident occurred involving obtaining unauthorized access to the data of website users​​”.&nbsp;

“As a result of the attack, the criminals gained access to e-mail addresses, telephone numbers and the content of messages collected on accounts,” the notice read.

<h2>What is this app?</h2>

LetMeSpy is an app that markets itself as a way to enhance parental control or employee monitoring. Once installed on a smartphone, it discreetly uploads SMS messages, call logs and loaction information to its servers.

The app is reportedly often used by spouses and has been described in media reports as 'stalkerware'. The app is usually 'planted' on a phone and the information it collects on the person that's subject to spying can be accessed by the person who has planted the spyware. The information uploaded by LetMeSpy also enables the planter to spy on another person in real-time.

However, it has been reported that these apps are often buggy. For all the spying that they do, their own defence mechanism isn't as robust, said reports. This enables hackers to attempt to break in an steal/ delete data.

The hacking of LetMeSpy was first reported by Polish security research blog Niebezpiecznik.&nbsp;

The blog reportedly attempted to contact LetMeSpy but instead of a reply from the app, was contacted by the hackers. They claimed that they had access to wide domain of the app.

As per reports, it is not yet clear who is behind the hacking attack. The hackers have said that they have deleted data stored on LetMySpy servers

TechCrunch has reported that a copy of the hacked LetMeSpy data was sent to it by DDoSecrets, which is a nono-profit that indexes leaked datasets for public interest.

TechCrunch has reported that the dataset contains years of call logs of the victims and text messages dating back to 2013.

The database with the news outlet had records of at least 12,000 devices that were compromised. The data also has over 13,400 location data points for several thousand victims.

That's not all, the data reportedly also contains information about 26,000 customers who used the spyware for free in addition to customers who bought subscriptions.

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

LetMeSpy, a spyware used to discreetly monitor a phone's data and location has been hacked, say media reports. The hackers have reportedly hacked the servers of LetMeSpy and deleted the data of thousands of users.

LetMeSpy, a spyware used to discreetly monitor a phone's data and location has been hacked, say media reports. The hackers have reportedly hacked the servers of LetMeSpy and deleted the data of thousands of users. The phone monitoring app said on its login page on June 21 that “a security incident occurred involving obtaining unauthorized access to the data of website users”. “As a result of the attack, the criminals gained access to e-mail addresses, telephone numbers and the content of messages collected on accounts,” the notice read. What is this app? LetMeSpy is an app that markets itself as a way to enhance parental control or employee monitoring. Once installed on a smartphone, it discreetly uploads SMS messages, call logs and loaction information to its servers. The app is reportedly often used by spouses and has been described in media reports as 'stalkerware'. The app is usually 'planted' on a phone and the information it collects on the person that's subject to spying can be accessed by the person who has planted the spyware. The information uploaded by LetMeSpy also enables the planter to spy on another person in real-time. However, it has been reported that these apps are often buggy. For all the spying that they do, their own defence mechanism isn't as robust, said reports. This enables hackers to attempt to break in an steal/ delete data. The hacking of LetMeSpy was first reported by Polish security research blog Niebezpiecznik. The blog reportedly attempted to contact LetMeSpy but instead of a reply from the app, was contacted by the hackers. They claimed that they had access to wide domain of the app. As per reports, it is not yet clear who is behind the hacking attack. The hackers have said that they have deleted data stored on LetMySpy servers TechCrunch has reported that a copy of the hacked LetMeSpy data was sent to it by DDoSecrets, which is a nono-profit that indexes leaked datasets for public interest. TechCrunch has reported that the dataset contains years of call logs of the victims and text messages dating back to 2013. The database with the news outlet had records of at least 12,000 devices that were compromised. The data also has over 13,400 location data points for several thousand victims. That's not all, the data reportedly also contains information about 26,000 customers who used the spyware for free in addition to customers who bought subscriptions. You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Hackers hack LetMeSpy, a phone tracking spyware that spied on thousands

A British man, Joseph James O'Connor, has been sentenced to five years in prison by the US attorney's office for his involvement in hacking schemes that targeted the Twitter accounts of celebrities, including prominent figures like President Joe Biden and now Twitter owner Elon Musk, reported the Guardian.&nbsp;The US authorities announced the verdict on Friday, highlighting the severity of O'Connor's actions.

<h2>Joseph James O'Connor pleads guilty to cybercrimes targeting high-profile individuals</h2>

O'Connor admitted to participating in a hacking group that successfully compromised over 130 Twitter accounts, using them to promote a Bitcoin scam.

Among the victims were well-known entities such as Apple, Uber, Kanye West, Bill Gates, and former US President Barack Obama. In addition, O'Connor pleaded guilty to stealing approximately $794,000 in virtual currency from a cryptocurrency company based in New York.

The arrest of O'Connor took place nearly two years ago in Spain, following the hacking incident that occurred in July 2020. After extradition proceedings, he was brought to the United States in April to face the charges filed against him.

The list of charges includes conspiracy to commit computer intrusions, conspiracy to commit wire fraud, conspiracy to commit money laundering, and stalking of two victims, among others. The most serious charge could have carried a maximum penalty of up to 20 years in prison.

Also read |<a href="https://www.wionews.com/world/uk-authorities-seize-millions-of-illegal-vapes-in-three-years-shows-data-608229">&nbsp;Illegal vapes flood UK markets, authorities seized over 2.5 million in three years, reveals data</a>

Apart from the prison sentence, O'Connor has also been ordered to serve three years of supervised release and pay restitution of $794,000. The impact of his criminal activities has been significant, as he harassed, threatened, and extorted his victims, causing substantial emotional harm.

Kenneth A Polite Jr, an assistant attorney general in the US justice department's criminal division, emphasised the flagrant and malicious nature of O'Connor's conduct, noting his attempts to remain anonymous by using computers, stealth accounts, and aliases outside the United States.

This case also involves two other individuals who have been charged with federal crimes related to the hacking incident. Nima Fazeli, hailing from Florida, and Mason Sheppard, a resident of Bognor Regis in the UK, are both implicated in the cybercrimes.

Additionally, a Florida teenager named Graham Ivan Clark, who is believed to be the mastermind behind the hacking group, was sentenced to three years in juvenile prison in July 2021, as permitted under state law.

Also watch |&nbsp;Poll: Support drops massively for the UK government

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/poll-support-drops-massively-for-the-uk-government-608240/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

The series of attacks on Twitter, which unfolded over several hours in July 2020, caused significant disruption and led the social media company to take unprecedented measures, including temporarily halting all verified accounts from tweeting. 
 
The incident underscored the vulnerability of high-profile individuals and organisations to cybercrimes, prompting increased attention to cybersecurity measures and the need for robust safeguards to protect against future attacks. 
 
&nbsp;

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

A British man, Joseph James O'Connor, has been sentenced to five years in prison by the US attorney's office for his involvement in hacking schemes that targeted the Twitter accounts of celebrities, including prominent figures like President Joe Biden and now Twitter owner Elon Musk, reported the Guardian.

A British man, Joseph James O'Connor, has been sentenced to five years in prison by the US attorney's office for his involvement in hacking schemes that targeted the Twitter accounts of celebrities, including prominent figures like President Joe Biden and now Twitter owner Elon Musk, reported the Guardian. The US authorities announced the verdict on Friday, highlighting the severity of O'Connor's actions. Joseph James O'Connor pleads guilty to cybercrimes targeting high-profile individuals O'Connor admitted to participating in a hacking group that successfully compromised over 130 Twitter accounts, using them to promote a Bitcoin scam. Among the victims were well-known entities such as Apple, Uber, Kanye West, Bill Gates, and former US President Barack Obama. In addition, O'Connor pleaded guilty to stealing approximately $794,000 in virtual currency from a cryptocurrency company based in New York. The arrest of O'Connor took place nearly two years ago in Spain, following the hacking incident that occurred in July 2020. After extradition proceedings, he was brought to the United States in April to face the charges filed against him. The list of charges includes conspiracy to commit computer intrusions, conspiracy to commit wire fraud, conspiracy to commit money laundering, and stalking of two victims, among others. The most serious charge could have carried a maximum penalty of up to 20 years in prison. Also read | Illegal vapes flood UK markets, authorities seized over 2.5 million in three years, reveals data Apart from the prison sentence, O'Connor has also been ordered to serve three years of supervised release and pay restitution of $794,000. The impact of his criminal activities has been significant, as he harassed, threatened, and extorted his victims, causing substantial emotional harm. Kenneth A Polite Jr, an assistant attorney general in the US justice department's criminal division, emphasised the flagrant and malicious nature of O'Connor's conduct, noting his attempts to remain anonymous by using computers, stealth accounts, and aliases outside the United States. This case also involves two other individuals who have been charged with federal crimes related to the hacking incident. Nima Fazeli, hailing from Florida, and Mason Sheppard, a resident of Bognor Regis in the UK, are both implicated in the cybercrimes. Additionally, a Florida teenager named Graham Ivan Clark, who is believed to be the mastermind behind the hacking group, was sentenced to three years in juvenile prison in July 2021, as permitted under state law. Also watch | Poll: Support drops massively for the UK government The series of attacks on Twitter, which unfolded over several hours in July 2020, caused significant disruption and led the social media company to take unprecedented measures, including temporarily halting all verified accounts from tweeting. The incident underscored the vulnerability of high-profile individuals and organisations to cybercrimes, prompting increased attention to cybersecurity measures and the need for robust safeguards to protect against future attacks. WATCH WION LIVE HERE:

British man sentenced to 5 years in prison for hacking celebrity Twitter accounts

Several US federal government agencies have been hit in a global hacking campaign. The country's cyber watchdog agency says that the hackers exploited a vulnerability in a widely used file-transfer software. The statement by the cybersecurity and infrastructure security agency added to a growing list of entities in the US, UK and other countries whose systems were infiltrated. British energy giant shell, the Johns Hopkins University, the Johns Hopkins health system and the university system of Georgia were also hit.

U.S. govt agencies hit in global hacking spree; Entities in UK & other nations also targeted

China has a long history of snooping on others; its intelligence agencies have been accused of employing a variety of techniques to collect critical information; they spy on corporations, other governments, and even their own citizens, and now China's objectives are being questioned once more. Chinese spies have allegedly breached hundreds of public and private networks this time, according to a USB cyber security company.

Mandiant: Chinese hackers attack several government agencies

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an <a href="https://go.checkpoint.com/2023-cyber-security-report/chapter-03.php">analysis </a>by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

The latest cyber-attack on India’s premier&nbsp;medical institution, the All India Institute of Medical Science&nbsp;(AIIMS), New Delhi,&nbsp;the <a href="https://www.wionews.com/india-news/aiims-says-malware-attack-successfully-thwarted-by-cyber-security-systems-601396">second such attack in a row</a> has rekindled discussion over India's&nbsp;preparedness&nbsp;to deal with attacks of the given nature.&nbsp;AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered.&nbsp;

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe aria-label="Grouped Bars" data-external="1" frameborder="0" height="546" id="datawrapper-chart-7Exvx" scrolling="no" src="https://datawrapper.dwcdn.net/7Exvx/1/" style="border: none;" title="Avg weekly cyber attacks per organisation by sector in 2022 (Globally)" width="600"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

<h2 dir="ltr">Why is India being targetted?</h2>

Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies.

“The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION.

<h2 dir="ltr">India’s healthcare sector a constant target? Why is health-related data so critical?</h2>

A nationwide initiative to <a href="https://main.mohfw.gov.in/sites/default/files/17739294021483341357.pdf">digitise medical data</a> was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records.&nbsp;

“Healthcare data is a prime target for <a href="https://www.wionews.com/india-news/delhis-bigest-cyber-fraud-doctor-duped-of-rs-45-crore-548k-via-skype-calls-594502">cyber-criminals</a> due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G.

He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks.&nbsp;

Also watch |&nbsp;Second malware attack at AIIMS, New Delhi&nbsp;

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/second-malware-attack-at-aiims-new-delhi-cyber-attack-india-news-601464/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

<h2 dir="ltr">Digitalisation and the risk of cyber-crimes</h2>

As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation.

“The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said.&nbsp;

<h2>Way forward</h2>

Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case?

“To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains.&nbsp;

The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the <a href="https://www.meity.gov.in/writereaddata/files/DIA_Presentation%2009.03.2023%20Final.pdf">digital India Act</a>.

 
WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst.

India witnessed 1,787 cyber-attacks each week on an average in an organisation over the past six months, compared to the global average of 983, as per an analysis by Check Point Software Technologies, an American-Israeli cyber threat intelligence analyst. The latest cyber-attack on India’s premier medical institution, the All India Institute of Medical Science (AIIMS), New Delhi, the second such attack in a row has rekindled discussion over India's preparedness to deal with attacks of the given nature. AIIMS in a statement released on Monday (June 5) said the attempt of malware attack was successfully thwarted and the threat was neutralised in time. But, the bigger questions of India's vulnerability, vigilance and digitalisation still remain unanswered. × Why is India being targetted? Cyber-attacks are frequently directed towards India due to its large population and expanding internet user base, resulting in a substantial attack surface, explains Dr Ananth Prabhu G, cyber law and security expert for various Indian law enforcement agencies. “The country's economic progress and digital modernisation have led to increased digitisation in various sectors, which has caught the attention of cyber-criminals who seek financial benefits and access to sensitive data. Additionally, India's global prominence and intricate political and geopolitical relationships make it a prime target for attacks motivated by politics, espionage, or the disruption of critical infrastructure. Government initiatives and the collection of vast amounts of personal data have made the systems enticing targets,” he told WION. India’s healthcare sector a constant target? Why is health-related data so critical? A nationwide initiative to digitise medical data was launched in September 2021, and as of now, more than 173,000 hospitals have enrolled with it. In accordance with medical records kept by hospitals on their own servers or in cloud storage, the programme allocates patient numbers that are linked to those records. “Healthcare data is a prime target for cyber-criminals due to its immense value and inherent vulnerabilities. Firstly, healthcare data contains a plethora of sensitive information that can be exploited for illicit purposes. Personally identifiable information (PII) like names, addresses, Aadhar, and insurance details can be illicitly traded on the black market for identity theft or used in fraudulent financial activities. Furthermore, medical records and health information hold significant worth as they can be leveraged for fraudulent billing, acquiring prescription drugs, or even extorting individuals with sensitive health conditions. The high value attached to healthcare data makes it an enticing objective for cyber-criminals seeking financial gain or other malicious intentions,” explains Dr Prabhu G. He further adds that healthcare systems are “particularly appealing” to hackers because they often possess weaker security measures compared to other industries. The healthcare sector traditionally prioritises patient care and operational efficiency over robust cybersecurity, leaving vulnerabilities that cyber-criminals can exploit. Outdated software, legacy systems, and inadequate investments in cyber security infrastructure render healthcare organisations more susceptible to attacks. Also watch | Second malware attack at AIIMS, New Delhi Digitalisation and the risk of cyber-crimes As per industry estimates, 2022 was India's worst year to date for cyber-attacks, an issue that has only become worse with rising digitalisation. “The process of digitalisation heightens the vulnerability to cyber crime as it expands the attack surface through interconnected systems, adds complexity to IT infrastructure, involves the accumulation of valuable data, increases connectivity, and witnesses the continuous evolution of cyber threats. This combination of factors grants cybercriminals numerous avenues to exploit weaknesses, pilfer sensitive information, disrupt operations, and inflict financial and reputational harm,” Dr Prabhu G said. Way forward Technology usage is accelerating, which will lead to an increase in cyber-attack frequency and intensity. How can organisations curb the risk of a cyber-attack in that case? “To bridge the gap and address the challenges posed by cyber-crime, it is essential to enhance collaboration between government agencies, private sector organisations, and cyber-security experts, while also prioritising robust cyber-security measures, education and training programmes, adequate resources and investment, legislation and regulation, international cooperation, continuous monitoring and incident response capabilities, and specific cyber-security awareness initiatives in sectors like healthcare. By taking these comprehensive steps, we can work towards a safer digital landscape, mitigate cyber threats, protect sensitive data, and foster a collective defence against cyber-criminals,” Dr Prabhu G explains. The most significant issue, notwithstanding India's security measures, is the ability of the criminals to penetrate the Indian cyber-security system, regardless of whether or not these attacks result in data or financial loss. Therefore, it is imperative to implement the digital India Act. WATCH WION LIVE HERE:

Data Lab | Digital India and the need to beef up cyber-security in healthcare

The mysterious and dark hacking World worldwide criminals are constantly looking for new ways to exploit cyber security this time hackers have stolen data from the systems of several users of a popular file transfer tool and the tool that we're talking about here is move a transfer it is owned by progress software and is designed to allow Enterprises to transfer files between business partners and customers yes it's a serious case there the news is revealed by a team of U.S security researchers and it comes one day after the softwares maker disclosed that a security flaw had been discovered the exact number and identity of the impacted organizations remain unclear the Chief Information officer has chosen not to disclose these details however he said that progress software has taken prompt action to address the vulnerability.

Criminals exploit cybersecurity once again, MOVEit tool exploited to steal data

Russia's Federal Security Service (FSB) said on Thursday (June 1) that it had detected an American spy operation that used a sophisticated surveillance software that allegedly hacked into thousands of iPhones, including those of diplomats. Moscow-based Kaspersky Lab claimed dozens of its employees' devices were compromised in the operation.

The FSB, which is the main successor to Soviet-era KGB, reportedly released a statement saying that several thousand Apple devices had been infected. FSB said that these included devices of domestic Russian subscribers as well as foreign diplomats based in Russia.

"The FSB has uncovered an intelligence action of the American special services using Apple mobile devices," the agency said in a statement, as quoted by Reuters.

The FSB said the plot showed "close cooperation" between iPhone maker Apple and the National Security Agency (NSA), which is responsible for cryptographic and communications intelligence and security.&nbsp;

Watch | Russia official says Ukraine shelling of border town injures four

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/russia-official-says-ukraine-shelling-of-border-town-injures-four-599205/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The agency did not provide any evidence that showed Apple was aware of, or co-operated with the spying campaign.

Apple denied the allegations.

"We have never worked with any government to insert a backdoor into any Apple product and never will," the firm said in a statement.

Reuters said that NSA declined to comment.

Kaspersky CEO Eugene Kaspersky said on Twitter that dozens of his employees' phones were compromised in the operation, which his company described as "an extremely complex, professionally targeted cyberattack" that had targeted workers in "top and middle-management."

Kaspersky researcher Igor Kuznetsov told Reuters that his company had independently discovered anomalous traffic on its corporate Wi-Fi network around the start of the year. He said Kaspersky did not circulate its findings to Russia's Computer Emergency Response Team until earlier on Thursday.

Also Read | <a href="https://www.wionews.com/world/west-directly-supports-genocide-in-ukraine-russias-lavrov-about-zelenskys-peace-plan-598440">‘West directly supports genocide’ in Ukraine: Russia's Lavrov on Zelensky's peace plan</a>

He reportedly said he was unable to comment on Russian allegation that Americans were responsible for the hacking.&nbsp;

"It's very hard to attribute anything to anyone," he said.

In a blog post, Kaspersky said the oldest traces of infection it discovered dated back to 2019. "As of the time of writing in June 2023, the attack is ongoing," the company said. It added that while its staff was hit, "we are quite confident that Kaspersky was not the main target of this cyberattack."

FSB alleged that the US hackers compromised diplomats from Israel, Syria, China and NATO members in the espionage campaign.

<h2>Foreign ministry backs FSB assertions</h2>

Russian foreign ministry backed FSB's claims.

"The hidden data collection was carried out through software vulnerabilities in U.S.-made mobile phones," Russia's foreign ministry said in a statement.

"The U.S. intelligence services have been using IT corporations for decades in order to collect large-scale data of Internet users without their knowledge," the ministry said.

(With inputs from agencies)

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

Russia's Federal Security Service (FSB) said on Thursday (June 1) that it had detected an American spy operation that used a sophisticated surveillance software that allegedly hacked into thousands of iPhones, including those of diplomats.

Russia's Federal Security Service (FSB) said on Thursday (June 1) that it had detected an American spy operation that used a sophisticated surveillance software that allegedly hacked into thousands of iPhones, including those of diplomats. Moscow-based Kaspersky Lab claimed dozens of its employees' devices were compromised in the operation. The FSB, which is the main successor to Soviet-era KGB, reportedly released a statement saying that several thousand Apple devices had been infected. FSB said that these included devices of domestic Russian subscribers as well as foreign diplomats based in Russia. "The FSB has uncovered an intelligence action of the American special services using Apple mobile devices," the agency said in a statement, as quoted by Reuters. The FSB said the plot showed "close cooperation" between iPhone maker Apple and the National Security Agency (NSA), which is responsible for cryptographic and communications intelligence and security. Watch | Russia official says Ukraine shelling of border town injures four × The agency did not provide any evidence that showed Apple was aware of, or co-operated with the spying campaign. Apple denied the allegations. "We have never worked with any government to insert a backdoor into any Apple product and never will," the firm said in a statement. Reuters said that NSA declined to comment. Kaspersky CEO Eugene Kaspersky said on Twitter that dozens of his employees' phones were compromised in the operation, which his company described as "an extremely complex, professionally targeted cyberattack" that had targeted workers in "top and middle-management." Kaspersky researcher Igor Kuznetsov told Reuters that his company had independently discovered anomalous traffic on its corporate Wi-Fi network around the start of the year. He said Kaspersky did not circulate its findings to Russia's Computer Emergency Response Team until earlier on Thursday. Also Read | ‘West directly supports genocide’ in Ukraine: Russia's Lavrov on Zelensky's peace plan He reportedly said he was unable to comment on Russian allegation that Americans were responsible for the hacking. "It's very hard to attribute anything to anyone," he said. In a blog post, Kaspersky said the oldest traces of infection it discovered dated back to 2019. "As of the time of writing in June 2023, the attack is ongoing," the company said. It added that while its staff was hit, "we are quite confident that Kaspersky was not the main target of this cyberattack." FSB alleged that the US hackers compromised diplomats from Israel, Syria, China and NATO members in the espionage campaign. Foreign ministry backs FSB assertions Russian foreign ministry backed FSB's claims. "The hidden data collection was carried out through software vulnerabilities in U.S.-made mobile phones," Russia's foreign ministry said in a statement. "The U.S. intelligence services have been using IT corporations for decades in order to collect large-scale data of Internet users without their knowledge," the ministry said. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Russia accuses US of hacking thousands of iPhones for spying

Around the time the FBI&nbsp;was investigating the equipment recovered from the Chinese spy balloon shot down off the coast of South Carolina in February, American intelligence agencies and Microsoft discovered what they feared was a more dangerous intruder, a&nbsp;mysterious computer code appearing in telecommunications systems in Guam and elsewhere in the United States. Guam is strategically significant as the American overseas territory hosts one of its largest airbases.

The malware, which Microsoft claimed was placed by a Chinese government hacking group, sparked concern since Guam, with its Pacific ports and massive American air base, would be the focal point of any American military reaction to an invasion or blockade of Taiwan. To make the infiltration harder to track, the operation was carried out with tremendous stealth, often passing through home routers and other popular internet-connected consumer devices, reported the New York Times.

<h2>What can the malware do?</h2>

The hackers were seen using a code known as "web shell," a malicious script that allows remote access to a server. Home routers are primarily&nbsp;vulnerable, particularly&nbsp;older devices with out-of-date software and security.

The computer code, unlike the balloon that captivated Americans as it performed pirouettes above vital nuclear installations, could not be shot down on live television.

Instead, Microsoft revealed details of the code on Wednesday, allowing business users, manufacturers, and others to find it&nbsp;and delete it.

The National Security Agency, together with other domestic agencies and intelligence counterparts in Australia, the United Kingdom, New Zealand, and Canada -- collectively known as Five Eyes-- issued a 24-page alert referring to Microsoft's discovery and issuing broader cautions about a "recently discovered" vulnerability.

ALSO READ |&nbsp;<a href="https://www.wionews.com/world/who-is-ron-desantis-all-you-need-to-know-about-republican-leader-seeking-prez-nomination-595578">Who is Ron DeSantis? All you need to know about Republican leader who joined White House race</a>

<h2>'Volt Typhoon'</h2>

Microsoft dubbed the hacking group&nbsp;"Volt Typhoon" and said it was part of a state-sponsored Chinese campaign aiming not just targeting key infrastructure like communications, electric and gas utilities, but also marine operations and transportation. For the time being, the breaches looked to be part of an espionage effort.

However, the Chinese might utilise the code, which is designed to breach firewalls, to launch devastating assaults if they so choose.

As stated by Microsoft, there is no proof that the Chinese organisation has exploited the access for hostile assaults thus far. Chinese intelligence and military hackers, unlike Russian outfits, typically prioritise espionage.

In interviews, administration officials said they suspected the code was part of a massive Chinese intelligence collecting programme that included internet, outer space, and, as the balloon incident revealed, the lower atmosphere.

<h2>Biden administration's response</h2>

The Biden administration has refused to divulge what the FBI discovered when examining the equipment retrieved from the balloon. However, the craft — better defined as a massive airborne vehicle — appears to have incorporated specialised radars and communications interception gear, which the FBI&nbsp;has been investigating since the balloon was shot down.

It is unclear if the administration's quiet regarding its discovery from the balloon is driven by a desire to block the Chinese government from learning what the US has discovered or by a desire to move past the diplomatic snub that accompanied the discovery.

President Biden said during a press conference in Hiroshima, Japan, on Sunday that the balloon episode had paralysed the already tense relations between Washington and Beijing.

ALSO WATCH |&nbsp;Good old banks are aiding china's ambitions

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/good-old-banks-are-aiding-chinas-ambitions-596253/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

“And then this silly balloon that was carrying two freight cars’ worth of spying equipment was flying over the United States,” he told reporters.

&nbsp;“And it got shot down, and everything changed in terms of talking to one another,” he added.

China has never admitted hacking into American networks, even in the most severe case: the theft of security clearance data from the Office of Personnel Management under the Obama administration, including six million sets of fingerprints.

That data exfiltration took about a year and ended in an agreement between President Barack Obama and President Xi Jinping that resulted in a modest decrease in detrimental Chinese cyberactivity.

<h2>Tabletop exercises</h2>

In an interview, Tom Burt, the executive in charge of Microsoft's threat intelligence unit, stated that the code was discovered "while investigating intrusion activity impacting a US&nbsp;port" by the company's analysts, many of whom had previously worked for the National Security Agency and other intelligence organisations, reported the New York Times.

Anne Neuberger, the deputy national security adviser for cyber and emerging technology, said that covert efforts “like the activity exposed today are part of what’s driving our focus on the security of telecom networks and the urgency to use trusted vendors” whose equipment has met cybersecurity standards.

In the countless number of tabletop exercises performed by the United States in recent years to simulate such an attack, one of China's first anticipated steps would be to cut off American communications and limit the United States' capacity to respond.

As a result, the simulations anticipate satellite and ground communications strikes, particularly near American locations where military assets might be mobilised.

WATCH WION LIVE HERE:

<iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed" style="width:100%;max-width:560px;" width="560"></iframe>

Around the time the FBI was investigating the equipment recovered from the Chinese spy balloon shot down off the coast of South Carolina in February, American intelligence agencies and Microsoft discovered what they feared was a more dangerous intruder, a mysterious computer code appearing in telecommunications systems in Guam and elsewhere in the United States.

Around the time the FBI was investigating the equipment recovered from the Chinese spy balloon shot down off the coast of South Carolina in February, American intelligence agencies and Microsoft discovered what they feared was a more dangerous intruder, a mysterious computer code appearing in telecommunications systems in Guam and elsewhere in the United States. Guam is strategically significant as the American overseas territory hosts one of its largest airbases. The malware, which Microsoft claimed was placed by a Chinese government hacking group, sparked concern since Guam, with its Pacific ports and massive American air base, would be the focal point of any American military reaction to an invasion or blockade of Taiwan. To make the infiltration harder to track, the operation was carried out with tremendous stealth, often passing through home routers and other popular internet-connected consumer devices, reported the New York Times. What can the malware do? The hackers were seen using a code known as "web shell," a malicious script that allows remote access to a server. Home routers are primarily vulnerable, particularly older devices with out-of-date software and security. The computer code, unlike the balloon that captivated Americans as it performed pirouettes above vital nuclear installations, could not be shot down on live television. Instead, Microsoft revealed details of the code on Wednesday, allowing business users, manufacturers, and others to find it and delete it. The National Security Agency, together with other domestic agencies and intelligence counterparts in Australia, the United Kingdom, New Zealand, and Canada -- collectively known as Five Eyes-- issued a 24-page alert referring to Microsoft's discovery and issuing broader cautions about a "recently discovered" vulnerability. ALSO READ | Who is Ron DeSantis? All you need to know about Republican leader who joined White House race 'Volt Typhoon' Microsoft dubbed the hacking group "Volt Typhoon" and said it was part of a state-sponsored Chinese campaign aiming not just targeting key infrastructure like communications, electric and gas utilities, but also marine operations and transportation. For the time being, the breaches looked to be part of an espionage effort. However, the Chinese might utilise the code, which is designed to breach firewalls, to launch devastating assaults if they so choose. As stated by Microsoft, there is no proof that the Chinese organisation has exploited the access for hostile assaults thus far. Chinese intelligence and military hackers, unlike Russian outfits, typically prioritise espionage. In interviews, administration officials said they suspected the code was part of a massive Chinese intelligence collecting programme that included internet, outer space, and, as the balloon incident revealed, the lower atmosphere. Biden administration's response The Biden administration has refused to divulge what the FBI discovered when examining the equipment retrieved from the balloon. However, the craft — better defined as a massive airborne vehicle — appears to have incorporated specialised radars and communications interception gear, which the FBI has been investigating since the balloon was shot down. It is unclear if the administration's quiet regarding its discovery from the balloon is driven by a desire to block the Chinese government from learning what the US has discovered or by a desire to move past the diplomatic snub that accompanied the discovery. President Biden said during a press conference in Hiroshima, Japan, on Sunday that the balloon episode had paralysed the already tense relations between Washington and Beijing. ALSO WATCH | Good old banks are aiding china's ambitions “And then this silly balloon that was carrying two freight cars’ worth of spying equipment was flying over the United States,” he told reporters. “And it got shot down, and everything changed in terms of talking to one another,” he added. China has never admitted hacking into American networks, even in the most severe case: the theft of security clearance data from the Office of Personnel Management under the Obama administration, including six million sets of fingerprints. That data exfiltration took about a year and ended in an agreement between President Barack Obama and President Xi Jinping that resulted in a modest decrease in detrimental Chinese cyberactivity. Tabletop exercises In an interview, Tom Burt, the executive in charge of Microsoft's threat intelligence unit, stated that the code was discovered "while investigating intrusion activity impacting a US port" by the company's analysts, many of whom had previously worked for the National Security Agency and other intelligence organisations, reported the New York Times. Anne Neuberger, the deputy national security adviser for cyber and emerging technology, said that covert efforts “like the activity exposed today are part of what’s driving our focus on the security of telecom networks and the urgency to use trusted vendors” whose equipment has met cybersecurity standards. In the countless number of tabletop exercises performed by the United States in recent years to simulate such an attack, one of China's first anticipated steps would be to cut off American communications and limit the United States' capacity to respond. As a result, the simulations anticipate satellite and ground communications strikes, particularly near American locations where military assets might be mobilised. WATCH WION LIVE HERE:

Explained | Everything about 'Volt Typhoon': China-backed hackers targeting critical US base in Guam

Chinese hackers targeted Kenya's government in a widespread, years-long series of digital intrusions against key ministries and state institutions, according to three sources, cybersecurity research reports and Reuters' own analysis of technical data related to the hackings.

Two of the sources assessed the hacks to be aimed, at least in part, at gaining information on debt owed to Beijing by the East African nation: Kenya is a strategic link in the Belt and Road Initiative - President Xi Jinping's plan for a global infrastructure network.

"Further compromises may occur as the requirement for understanding upcoming repayment strategies becomes needed," a July 2021 research report written by a defence contractor for private clients stated.

China's foreign ministry said it was "not aware" of any such hacking, while China's embassy in Britain called the accusations "baseless", adding that Beijing opposes and combats "cyberattacks and theft in all their forms."&nbsp;

China's influence in Africa has grown rapidly over the past two decades. But, like several African nations, Kenya's finances are being strained by the growing cost of servicing external debt - much of it owed to China.

The hacking campaign demonstrates China's willingness to leverage its espionage capabilities to monitor and protect economic and strategic interests abroad, two of the sources said.

The hacks constitute a three-year campaign that targeted eight of Kenya's ministries and government departments, including the presidential office, according to an intelligence analyst in the region. The analyst also shared with Reuters research documents that included the timeline of attacks, the targets, and provided some technical data relating to the compromise of a server used exclusively by Kenya's main spy agency.

A Kenyan cybersecurity expert described similar hacking activity against the foreign and finance ministries. All three of the sources asked not to be named due to the sensitive nature of their work.

"Your allegation of hacking attempts by Chinese Government entities is not unique," Kenya's presidential office said, adding the government had been targeted by "frequent infiltration attempts" from Chinese, American and European hackers.

"As far as we are concerned, none of the attempts were successful," it said.

It did not provide further details nor respond to follow-up questions.

A spokesperson for the Chinese embassy in Britain said China is against "irresponsible moves that use topics like cybersecurity to sow discord in the relations between China and other developing countries".

"China attaches great importance to Africa's debt issue and works intensively to help Africa cope with it," the spokesperson added.

<h2>THE HACKS</h2>

Between 2000 and 2020, China committed nearly $160 billion in loans to African countries, according to a comprehensive database on Chinese lending hosted by Boston University, much of it for large-scale infrastructure projects.

Kenya used over $9 billion in Chinese loans to fund an aggressive push to build or upgrade railways, ports and highways.

Beijing became the country's largest bilateral creditor and gained a firm foothold in the most important East African consumer market and a vital logistical hub on Africa's Indian Ocean coast.

By late 2019, however, when the Kenyan cybersecurity expert told Reuters he was brought in by Kenyan authorities to assess a hack of a government-wide network, Chinese lending was drying up. And Kenya's financial strains were showing.

The breach reviewed by the Kenyan cybersecurity expert and attributed to China began with a "spearphishing" attack at the end of that same year, when a Kenyan government employee unknowingly downloaded an infected document, allowing hackers to infiltrate the network and access other agencies.

"A lot of documents from the ministry of foreign affairs were stolen and from the finance department as well. The attacks appeared focused on the debt situation," the Kenyan cybersecurity expert said.

Another source - the intelligence analyst working in the region - said Chinese hackers carried out a far-reaching campaign against Kenya that began in late 2019 and continued until at least 2022.

According to documents provided by the analyst, Chinese cyber spies subjected the office of Kenya's president, its defence, information, health, land and interior ministries, its counter-terrorism centre and other institutions to persistent and prolonged hacking activity.

The affected government departments did not respond to requests for comment, declined to be interviewed or were unreachable.

By 2021, global economic fallout from the COVID-19 pandemic had already helped push one major Chinese borrower - Zambia - to default on its external debt. Kenya managed to secure a temporary debt repayment moratorium from China.

In early July 2021, the cybersecurity research reports shared by the intelligence analyst in the region detailed how the hackers secretly accessed an email server used by Kenya's National Intelligence Service (NIS).

Reuters was able to confirm that the victim's IP address belonged to the NIS. The incident was also covered in a report from the private defence contractor reviewed by Reuters.

Reuters could not determine what information was taken during the hacks or conclusively establish the motive for the attacks. But the defence contractor's report said the NIS breach was possibly aimed at gleaning information on how Kenya planned to manage its debt payments.

"Kenya is currently feeling the pressure of these debt burdens...as many of the projects financed by Chinese loans are not generating enough income to pay for themselves yet," the report stated.

A Reuters review of internet logs delineating the Chinese digital espionage activity showed that a server controlled by the Chinese hackers also accessed a shared Kenyan government webmail service more recently from December 2022 until February this year.

Chinese officials declined to comment on this recent breach, and the Kenyan authorities did not respond to a question about it.

<h2>'BACKDOOR DIPLOMACY'</h2>

The defence contractor, pointing to identical tools and techniques used in other hacking campaigns, identified a Chinese state-linked hacking team as having carried out the attack on Kenya's intelligence agency.

The group is known as "BackdoorDiplomacy" in the cybersecurity research community, because of its record of trying to further the objectives of Chinese diplomatic strategy.

According to Slovakia-based cybersecurity firm ESET, BackdoorDiplomacy re-uses malicious software against its victims to gain access to their networks, making it possible to track their activities.

Provided by Reuters with the IP address of the NIS hackers, Palo Alto Networks, a U.S. cybersecurity firm that tracks BackdoorDiplomacy's activities, confirmed that it belongs to the group, adding that its prior analysis shows the group is sponsored by the Chinese state.

Cybersecurity researchers have documented BackdoorDiplomacy hacks targeting governments and institutions in a number of countries in Asia and Europe.

Incursions into the Middle East and Africa appear less common, making the focus and scale of its hacking activities in Kenya particularly noteworthy, the defence contractor's report said.

"This angle is clearly a priority for the group."

China's embassy in Britain rejected any involvement in the Kenya hackings and did not directly address questions about the government's relationship with BackdoorDiplomacy.

"China is a main victim of cyber theft and attacks and a staunch defender of cybersecurity," a spokesperson said.

&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

Chinese hackers targeted Kenya's government in a widespread, years-long series of digital intrusions against key ministries and state institutions, according to three sources, cybersecurity research reports and Reuters' own analysis of technical data related to the hackings.

Chinese hackers targeted Kenya's government in a widespread, years-long series of digital intrusions against key ministries and state institutions, according to three sources, cybersecurity research reports and Reuters' own analysis of technical data related to the hackings. Two of the sources assessed the hacks to be aimed, at least in part, at gaining information on debt owed to Beijing by the East African nation: Kenya is a strategic link in the Belt and Road Initiative - President Xi Jinping's plan for a global infrastructure network. "Further compromises may occur as the requirement for understanding upcoming repayment strategies becomes needed," a July 2021 research report written by a defence contractor for private clients stated. China's foreign ministry said it was "not aware" of any such hacking, while China's embassy in Britain called the accusations "baseless", adding that Beijing opposes and combats "cyberattacks and theft in all their forms." China's influence in Africa has grown rapidly over the past two decades. But, like several African nations, Kenya's finances are being strained by the growing cost of servicing external debt - much of it owed to China. The hacking campaign demonstrates China's willingness to leverage its espionage capabilities to monitor and protect economic and strategic interests abroad, two of the sources said. The hacks constitute a three-year campaign that targeted eight of Kenya's ministries and government departments, including the presidential office, according to an intelligence analyst in the region. The analyst also shared with Reuters research documents that included the timeline of attacks, the targets, and provided some technical data relating to the compromise of a server used exclusively by Kenya's main spy agency. A Kenyan cybersecurity expert described similar hacking activity against the foreign and finance ministries. All three of the sources asked not to be named due to the sensitive nature of their work. "Your allegation of hacking attempts by Chinese Government entities is not unique," Kenya's presidential office said, adding the government had been targeted by "frequent infiltration attempts" from Chinese, American and European hackers. "As far as we are concerned, none of the attempts were successful," it said. It did not provide further details nor respond to follow-up questions. A spokesperson for the Chinese embassy in Britain said China is against "irresponsible moves that use topics like cybersecurity to sow discord in the relations between China and other developing countries". "China attaches great importance to Africa's debt issue and works intensively to help Africa cope with it," the spokesperson added. THE HACKS Between 2000 and 2020, China committed nearly $160 billion in loans to African countries, according to a comprehensive database on Chinese lending hosted by Boston University, much of it for large-scale infrastructure projects. Kenya used over $9 billion in Chinese loans to fund an aggressive push to build or upgrade railways, ports and highways. Beijing became the country's largest bilateral creditor and gained a firm foothold in the most important East African consumer market and a vital logistical hub on Africa's Indian Ocean coast. By late 2019, however, when the Kenyan cybersecurity expert told Reuters he was brought in by Kenyan authorities to assess a hack of a government-wide network, Chinese lending was drying up. And Kenya's financial strains were showing. The breach reviewed by the Kenyan cybersecurity expert and attributed to China began with a "spearphishing" attack at the end of that same year, when a Kenyan government employee unknowingly downloaded an infected document, allowing hackers to infiltrate the network and access other agencies. "A lot of documents from the ministry of foreign affairs were stolen and from the finance department as well. The attacks appeared focused on the debt situation," the Kenyan cybersecurity expert said. Another source - the intelligence analyst working in the region - said Chinese hackers carried out a far-reaching campaign against Kenya that began in late 2019 and continued until at least 2022. According to documents provided by the analyst, Chinese cyber spies subjected the office of Kenya's president, its defence, information, health, land and interior ministries, its counter-terrorism centre and other institutions to persistent and prolonged hacking activity. The affected government departments did not respond to requests for comment, declined to be interviewed or were unreachable. By 2021, global economic fallout from the COVID-19 pandemic had already helped push one major Chinese borrower - Zambia - to default on its external debt. Kenya managed to secure a temporary debt repayment moratorium from China. In early July 2021, the cybersecurity research reports shared by the intelligence analyst in the region detailed how the hackers secretly accessed an email server used by Kenya's National Intelligence Service (NIS). Reuters was able to confirm that the victim's IP address belonged to the NIS. The incident was also covered in a report from the private defence contractor reviewed by Reuters. Reuters could not determine what information was taken during the hacks or conclusively establish the motive for the attacks. But the defence contractor's report said the NIS breach was possibly aimed at gleaning information on how Kenya planned to manage its debt payments. "Kenya is currently feeling the pressure of these debt burdens...as many of the projects financed by Chinese loans are not generating enough income to pay for themselves yet," the report stated. A Reuters review of internet logs delineating the Chinese digital espionage activity showed that a server controlled by the Chinese hackers also accessed a shared Kenyan government webmail service more recently from December 2022 until February this year. Chinese officials declined to comment on this recent breach, and the Kenyan authorities did not respond to a question about it. 'BACKDOOR DIPLOMACY' The defence contractor, pointing to identical tools and techniques used in other hacking campaigns, identified a Chinese state-linked hacking team as having carried out the attack on Kenya's intelligence agency. The group is known as "BackdoorDiplomacy" in the cybersecurity research community, because of its record of trying to further the objectives of Chinese diplomatic strategy. According to Slovakia-based cybersecurity firm ESET, BackdoorDiplomacy re-uses malicious software against its victims to gain access to their networks, making it possible to track their activities. Provided by Reuters with the IP address of the NIS hackers, Palo Alto Networks, a U.S. cybersecurity firm that tracks BackdoorDiplomacy's activities, confirmed that it belongs to the group, adding that its prior analysis shows the group is sponsored by the Chinese state. Cybersecurity researchers have documented BackdoorDiplomacy hacks targeting governments and institutions in a number of countries in Asia and Europe. Incursions into the Middle East and Africa appear less common, making the focus and scale of its hacking activities in Kenya particularly noteworthy, the defence contractor's report said. "This angle is clearly a priority for the group." China's embassy in Britain rejected any involvement in the Kenya hackings and did not directly address questions about the government's relationship with BackdoorDiplomacy. "China is a main victim of cyber theft and attacks and a staunch defender of cybersecurity," a spokesperson said. WATCH WION LIVE HERE

Chinese hackers attacked Kenyan government as debt strains grew

Deloitte India has fired an employee accused of running a global hacking gang, a day after the Sunday Times and the Bureau of Investigative Journalism made the expose about the illicit operations.

Deloitte India has fired an employee accused of running a global hacking gang, a day after the Sunday Times and the Bureau of Investigative Journalism made the expose about the illicit operations. “We are aware of the recent media reports outlining serious allegations about an individual who used to work for Deloitte India. This individual no longer works for Deloitte India,” said the company spokesperson. Reportedly, a day before, it was revealed that Aditya Jain, an associate director with the company's cyber unit was running a hacking group named WhiteInt that acted as a 'hack-for-hire' company. As per reports, he was earlier working with one of the Big Four companies. According to reports, Jain's hacking firm had information regarding several famous personalities from across the globe. Former Pakistan president Pervez Musharraf, former Pakistan minister Fawad Chaudhry, former UK chancellor Philip Hammond and Swiss President Ignazio Cassis were among the few whose confidential information was accessed by the gang. He was running the operations from a fourth-floor apartment in the Northern Indian city of Gurugram, known for housing big tech companies. Read more: India: Russian man arrested for hacking JEE Mains software to help students cheat WATCH | Deloitte employee behind global hacking gang; hack firm operate under the name 'Whitein' × Jain joined Deloitte in February earlier this year and was previously employed with one of the Big Four firms of the country, up until March 2021. Notably, EY, Deloitte, PwC and KPMG constitute the Big Four firms and have large cyber-security practices. Their business has grown exponentially during the pandemic as work from home became the trend. In the report that blew the lid on the operations, it was also revealed that several Indian hackers offered their services willingly to hack into confidential and private email accounts of the victims, after receiving intel from autocratic states, and wealthy businessmen. Read more: Optus leak: Singapore Telecommunications appoints Deloitte to assess data breach (With inputs from agencies) WATCH WION LIVE HERE:

Deloitte India fires employee accused of running an international hacking ring

ChatGPT-maker OpenAI along with other Artificial Intelligence chatbot makers such as Google and Microsoft may soon let thousands of hackers to test the limits of Artificial Intelligence.

The AI bigwigs of the present are reportedly coordinating with the Biden administration to bring about one such event.&nbsp;

"This is why we need thousands of people," Rumman Chowdhury, a coordinator of the mass hacking event planned for this summer’s DEF CON hacker convention in Las Vegas that’s expected to draw several thousand people, was quoted as saying by Associated Press.&nbsp;

ALSO READ |&nbsp;<a href="https://www.wionews.com/technology/ai-vs-human-race-chatting-with-chatgpt-591028">Artificial Intelligence Vs Humans: Chatting with ChatGPT on all things AI</a>

"We need a lot of people with a wide range of lived experiences, subject matter expertise and backgrounds hacking at these models and trying to find problems that can then go be fixed."

Users of ChatGPT, Microsoft’s Bing chatbot or Google’s Bard have have come to learn about AI's tendency to fabricate information which is confidently presented as fact. These systems, built on what’s known as large language models, also emulate the cultural biases they have learned from being trained upon huge troves of what people have written online.

ALSO WATCH |&nbsp;'A bit scared': OpenAI CEO says ChatGPT may wipe out current jobs

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/a-bit-scared-openai-ceo-says-chatgpt-may-wipe-out-current-jobs-574180/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

The idea of a mass hack caught the attention of the American&nbsp;government officials in March at the South by Southwest festival in Austin, Texas, where Sven Cattell, founder of DEF CON’s long-running AI Village, and Austin Carson, president of responsible AI nonprofit SeedAI, helped lead a workshop inviting community college students to hack an AI model, Associated Press report added.&nbsp;

This year, the event will be at a much greater scale. It is the first to tackle the large language models that have attracted a surge of public interest and commercial investment since the release of ChatGPT late last year.

Some of the details are still being negotiated. But companies that have agreed to provide their models for testing include OpenAI, Google, chipmaker Nvidia and startups Anthropic, Hugging Face and Stability AI.

"As these foundation models become more and more widespread, it’s really critical that we do everything we can to ensure their safety,” Scale CEO Alexandr Wang told Associated Press. "You can imagine somebody on one side of the world asking it some very sensitive or detailed questions, including some of their personal information. You don’t want any of that information leaking to any other user."

Anthropic co-founder Jack Clark said the DEF CON event will hopefully be the start of a deeper commitment from AI developers to measure and evaluate the safety of the systems they are building.

"Our basic view is that AI systems will need third-party assessments, both before deployment and after deployment. Red-teaming is one way that you can do that," Clark told Associated Press. "We need to get practice at figuring out how to do this. It hasn’t really been done before."

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1  width=&quot;100%&quot;"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

ChatGPT-maker OpenAI along with other Artificial Intelligence chatbot makers such as Google and Microsoft may soon let thousands of hackers to test the limits of Artificial Intelligence.

ChatGPT-maker OpenAI along with other Artificial Intelligence chatbot makers such as Google and Microsoft may soon let thousands of hackers to test the limits of Artificial Intelligence. The AI bigwigs of the present are reportedly coordinating with the Biden administration to bring about one such event. "This is why we need thousands of people," Rumman Chowdhury, a coordinator of the mass hacking event planned for this summer’s DEF CON hacker convention in Las Vegas that’s expected to draw several thousand people, was quoted as saying by Associated Press. ALSO READ | Artificial Intelligence Vs Humans: Chatting with ChatGPT on all things AI "We need a lot of people with a wide range of lived experiences, subject matter expertise and backgrounds hacking at these models and trying to find problems that can then go be fixed." Users of ChatGPT, Microsoft’s Bing chatbot or Google’s Bard have have come to learn about AI's tendency to fabricate information which is confidently presented as fact. These systems, built on what’s known as large language models, also emulate the cultural biases they have learned from being trained upon huge troves of what people have written online. ALSO WATCH | 'A bit scared': OpenAI CEO says ChatGPT may wipe out current jobs × The idea of a mass hack caught the attention of the American government officials in March at the South by Southwest festival in Austin, Texas, where Sven Cattell, founder of DEF CON’s long-running AI Village, and Austin Carson, president of responsible AI nonprofit SeedAI, helped lead a workshop inviting community college students to hack an AI model, Associated Press report added. This year, the event will be at a much greater scale. It is the first to tackle the large language models that have attracted a surge of public interest and commercial investment since the release of ChatGPT late last year. Some of the details are still being negotiated. But companies that have agreed to provide their models for testing include OpenAI, Google, chipmaker Nvidia and startups Anthropic, Hugging Face and Stability AI. "As these foundation models become more and more widespread, it’s really critical that we do everything we can to ensure their safety,” Scale CEO Alexandr Wang told Associated Press. "You can imagine somebody on one side of the world asking it some very sensitive or detailed questions, including some of their personal information. You don’t want any of that information leaking to any other user." Anthropic co-founder Jack Clark said the DEF CON event will hopefully be the start of a deeper commitment from AI developers to measure and evaluate the safety of the systems they are building. "Our basic view is that AI systems will need third-party assessments, both before deployment and after deployment. Red-teaming is one way that you can do that," Clark told Associated Press. "We need to get practice at figuring out how to do this. It hasn’t really been done before." (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

DEF CON hacker convention: Thousands to test AI chatbots’ abilities, safety and loopholes

We all have various passwords for multiple accounts. But are you sure that your passwords are not weak? Because if that's the case, you may need to change them right away. Watch this story to know why.

How to save your online accounts from hackers | Tech It Out

The FBI has warned people against using public USB charging ports as hackers are using them for "Juice Jacking". How will you know if your device has been hacked? Molly Gambhir brings you a report.

Gravitas: Hackers taking over USB charging ports

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software. The Denver branch in a tweet said, "Avoid using free charging stations in airports, hotels or shopping centres. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead." The organisation told CBS News that there is no specific incident that caused the public announcement, rather was meant as a "field warning." While these charging stations are useful to many when devices are running low on battery, cyber experts have been raising security&nbsp;concerns for years.

In the last four years, the threats designed to propagate over USB or exploit USB for infection rose to 52 per cent, the 2022 USB Threat report by Honeywell Forge said. &nbsp;

In 2011, they introduced the term "juice jacking" to describe the problem.&nbsp;

<h3>What is juice jacking?</h3>

A term coined in 2011, still remains a concern. It means a security vulnerability in which a tampered or infected USB charging station is used to compromise linked devices.

The Federal Communications Commission (FCC) officials warned malware installed through corrupted USB ports can lock a device or even export personal data including passwords directly to criminals.&nbsp;

Drew Paik, a former employee of security firm Authentic8 told news agency CNN that plugging your phone into a (compromised) charger infects your device and data. If the port is compromised, then&nbsp;there is no limit to what extent a hacker could access the information. The hacker can even lock your device.

Experts have advised never to use a charger that isn't yours or someone you know.

The FCC in its recent blog post said, "In some cases, criminals may have intentionally left cables plugged in at charging stations.&nbsp;There have even been reports of infected cables being given away as promotional gifts."

<h3>Steps to avoid juice jacking?</h3>

Like the FBI, FCC recommends public to avoid using public USB charging stations and use a power outlet instead. In case you're travelling, always carry a portable charger or an external battery.&nbsp;

If you don't have any of these and are compelled to use a public station, thoroughly inspect it and if it appears to have been tampered with in any way, don't use it.&nbsp;

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software.

The Federal Bureau of Investigation (FBI) is warning people to not use public phone charging stations or USB ports to avoid exposing their devices to malicious software. The Denver branch in a tweet said, "Avoid using free charging stations in airports, hotels or shopping centres. Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices. Carry your own charger and USB cord and use an electrical outlet instead." The organisation told CBS News that there is no specific incident that caused the public announcement, rather was meant as a "field warning." While these charging stations are useful to many when devices are running low on battery, cyber experts have been raising security concerns for years. In the last four years, the threats designed to propagate over USB or exploit USB for infection rose to 52 per cent, the 2022 USB Threat report by Honeywell Forge said. In 2011, they introduced the term "juice jacking" to describe the problem. What is juice jacking? A term coined in 2011, still remains a concern. It means a security vulnerability in which a tampered or infected USB charging station is used to compromise linked devices. The Federal Communications Commission (FCC) officials warned malware installed through corrupted USB ports can lock a device or even export personal data including passwords directly to criminals. Drew Paik, a former employee of security firm Authentic8 told news agency CNN that plugging your phone into a (compromised) charger infects your device and data. If the port is compromised, then there is no limit to what extent a hacker could access the information. The hacker can even lock your device. Experts have advised never to use a charger that isn't yours or someone you know. The FCC in its recent blog post said, "In some cases, criminals may have intentionally left cables plugged in at charging stations. There have even been reports of infected cables being given away as promotional gifts." Steps to avoid juice jacking? Like the FBI, FCC recommends public to avoid using public USB charging stations and use a power outlet instead. In case you're travelling, always carry a portable charger or an external battery. If you don't have any of these and are compelled to use a public station, thoroughly inspect it and if it appears to have been tampered with in any way, don't use it.

Beware of juice jacking: FBI warns against using public USB charging points over security concerns

Hackers in Ukraine said on Monday (April 10) that they had broken into e-mails of a senior Russian military spy wanted by the FBI in connection with hacking into the Hillary Clinton campaign ahead of Donald Trump's election to presidency in 2016.

The hacker group, calling itself Cyber Resistance announced on Telegram that it had stolen correspondence from Lt Col Sergey Morgachev.

Sergey Morgachev was charged in 2018 with helping organise hack and leak of emails from Democratic National Committee (DNC) and campaign of Hillary Clinton.

Watch | Ukraine’s air defences could soon run out of missiles, apparent Pentagon leak suggests

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false">
<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/ukraines-air-defences-could-soon-run-out-of-missiles-apparent-pentagon-leak-suggests-581437/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>
</div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

Reuters quoted Stefan Soesanto, a researcher at the Swiss Federal Institute of Technology in Zurich, who said that the leak "looks pretty credible". Soesanto has studied Ukrainian hacking groups.

InformNapalm said in an article about the breach that it confirmed Morgachev's identity by checking personnel files and CVs stolen by the hackers.

On its website, InformNapalm calls itself a volunteer initiative and that its core mission is to "inform the world about the real role of the Russian government in ongoing hybrid conflicts in Ukraine,..."

No immediate reaction from Morgachev was reported.

(With inputs from agencies)

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

Hackers in Ukraine said on Monday (April 10) that they had broken into e-mails of a senior Russian military spy wanted by the FBI in connection with hacking into the Hillary Clinton campaign ahead of Donald Trump's election to presidency in 2016.

Hackers in Ukraine said on Monday (April 10) that they had broken into e-mails of a senior Russian military spy wanted by the FBI in connection with hacking into the Hillary Clinton campaign ahead of Donald Trump's election to presidency in 2016. The hacker group, calling itself Cyber Resistance announced on Telegram that it had stolen correspondence from Lt Col Sergey Morgachev. Sergey Morgachev was charged in 2018 with helping organise hack and leak of emails from Democratic National Committee (DNC) and campaign of Hillary Clinton. Watch | Ukraine’s air defences could soon run out of missiles, apparent Pentagon leak suggests × Reuters quoted Stefan Soesanto, a researcher at the Swiss Federal Institute of Technology in Zurich, who said that the leak "looks pretty credible". Soesanto has studied Ukrainian hacking groups. InformNapalm said in an article about the breach that it confirmed Morgachev's identity by checking personnel files and CVs stolen by the hackers. On its website, InformNapalm calls itself a volunteer initiative and that its core mission is to "inform the world about the real role of the Russian government in ongoing hybrid conflicts in Ukraine,..." No immediate reaction from Morgachev was reported. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Ukraine hackers claim hacking Russian spy who targetted US Democrats in 2016

According to a report by home security Heroes, artificial intelligence is already capable of cracking passwords. In less than a minute, it can assist hackers in gaining access to your credentials.

AI Experiment: Watch as Over 50% of Passwords are Cracked in Less Than a Minute

New vulnerabilities have been spotted in Android phones. Microsoft may soon allow users to use AI in office applications such as Word and Excel. The week gone by was buzzing with a lot of exciting technologies and we bring you the most interesting ones in our Tech Wrap.

Android devices are prone to hacking | Tech It Out

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking. E-mails and passwords of customer support websites or two of Asia's biggest data centre operators: GDS Holdings Ltd. and ST Telemedia Global Data Centres.

About 2000 customers of GDS and STT GDC have reportedly been affected. According to the report, login credentials of at least five of them have been used. These include four companies in India and China's main foreign exchange and debt trading platform.

The credentials which have been acquired by the hackers include those of major companies like Amazon, Apple, Alibaba, Huawei and more.

Bloomberg reported that both, GDS and STT GDC said that data breach did not pose threat to their clients' systems.

Nevertheless, the data breach has highlighted the risks companies face when they depend on third-parties for their data and IT equipment.&nbsp;

“This is a nightmare waiting to happen,” said Michael Henry, former chief information officer for Digital Realty Trust Inc. as quoted by Bloomberg.

“If they can achieve that, they can potentially disrupt communications and commerce on a massive scale.”

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking.

In a huge development, hackers were reported to have got hold on login credentials to data centres in Asia which are used by world's biggest businesses. In its report, Bloomberg said that this could open doors for espionage or hacking. E-mails and passwords of customer support websites or two of Asia's biggest data centre operators: GDS Holdings Ltd. and ST Telemedia Global Data Centres. About 2000 customers of GDS and STT GDC have reportedly been affected. According to the report, login credentials of at least five of them have been used. These include four companies in India and China's main foreign exchange and debt trading platform. The credentials which have been acquired by the hackers include those of major companies like Amazon, Apple, Alibaba, Huawei and more. Bloomberg reported that both, GDS and STT GDC said that data breach did not pose threat to their clients' systems. Nevertheless, the data breach has highlighted the risks companies face when they depend on third-parties for their data and IT equipment. “This is a nightmare waiting to happen,” said Michael Henry, former chief information officer for Digital Realty Trust Inc. as quoted by Bloomberg. “If they can achieve that, they can potentially disrupt communications and commerce on a massive scale.” You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Hackers hack data centres in Asia, get credentials of major companies

Across the world from hospitals to airlines - all have been a target of hackers. Now, personal data of about 500 million passengers and all employees of Malaysia-based low cost airlines - Airasia - was compromised in a ransom attack.

Ransomware attack on Airasia, personal data of passengers and employees affected

Last month, a ransomware attack compromised the personal data of approximately five million passengers and all Air Asia employees. Malaysian authorities are still investigating the source and the overall impact but have gathered few leads so far.

Malaysia launches investigation into low-cost airline Air Asia ransomware attack

Google Chrome has announced that it will soon be introducing passwordless login. The popular browser will now use&nbsp;biometric sensors such as a fingerprint or facial recognition, PIN, or pattern for authentication purposes.&nbsp;

If you are someone who finds it difficult to remember passwords, and so you end up using the same one for every single account, you're not alone.&nbsp;

Watch |&nbsp;WION Fineprint | The most common passwords of 2022

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/wion-fineprint-the-most-common-passwords-of-2022-534838/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

As per a SpyCloud analysis of 1.7 billion username and password combinations, &nbsp;64 per cent of the people use the same password exposed in one breach for other accounts.&nbsp;

In the digital world, we're a part of, we have an endless number of accounts, from social media to banking everything needs a password, and to remember the seemingly hundreds of passwords is difficult, to say the least.

Also read |&nbsp;<a href="https://www.wionews.com/technology/thiefs-can-use-thermal-camera-and-ai-to-crack-your-password-heres-how-524376">Thieves can use thermal camera and AI to crack your password. Here's how</a>

The worst part is even then your accounts aren't really safe. The year 2022 saw an exponential rise in the number of hacking and data pishing incidents.

As per reports, over 15 billion credentials have been exposed to the dark web, and about 54 per cent of these led to credential theft. Passwords just aren't cutting it anymore.

This has led to a number of platforms, and service providers moving towards passwordless authentication. Now Google chrome has joined the foray.

Also read |&nbsp;<a href="https://www.wionews.com/technology/iphones-crash-detection-feature-assumes-woman-enjoying-rollercoaster-has-been-in-crash-calls-911-524339" hreflang="en">iPhone's crash detection feature assumes woman enjoying rollercoaster has been in crash, calls 911</a>

In March of this year, Microsoft, Okta, LastPass and Google announced that they were moving towards easy passwordless logins as part of the FIDO alliance.&nbsp;

With Google Chrome's new passwordless feature users will now be able to create passkeys to log into their android devices.

As per Venture Beat the "move toward passwordless authentication is a recognition of password-based security’s fundamental ineffectiveness."

Google in its announcement blog said that passkeys are a significantly safer replacement for passwords and other phishable authentication factors.&nbsp;

"They cannot be reused, don't leak in server breaches, and protect users from phishing attacks. Passkeys are built on industry standards and work across different operating systems and browser ecosystems, and can be used for both websites and apps," it added.

(With inputs from agencies)

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

Google Chrome has announced that it will soon be introducing passwordless login. The popular browser will now use biometric sensors such as a fingerprint or facial recognition, PIN, or pattern for authentication purposes.

Google Chrome has announced that it will soon be introducing passwordless login. The popular browser will now use biometric sensors such as a fingerprint or facial recognition, PIN, or pattern for authentication purposes. If you are someone who finds it difficult to remember passwords, and so you end up using the same one for every single account, you're not alone. Watch | WION Fineprint | The most common passwords of 2022 As per a SpyCloud analysis of 1.7 billion username and password combinations, 64 per cent of the people use the same password exposed in one breach for other accounts. In the digital world, we're a part of, we have an endless number of accounts, from social media to banking everything needs a password, and to remember the seemingly hundreds of passwords is difficult, to say the least. Also read | Thieves can use thermal camera and AI to crack your password. Here's how The worst part is even then your accounts aren't really safe. The year 2022 saw an exponential rise in the number of hacking and data pishing incidents. As per reports, over 15 billion credentials have been exposed to the dark web, and about 54 per cent of these led to credential theft. Passwords just aren't cutting it anymore. This has led to a number of platforms, and service providers moving towards passwordless authentication. Now Google chrome has joined the foray. Also read | iPhone's crash detection feature assumes woman enjoying rollercoaster has been in crash, calls 911 In March of this year, Microsoft, Okta, LastPass and Google announced that they were moving towards easy passwordless logins as part of the FIDO alliance. With Google Chrome's new passwordless feature users will now be able to create passkeys to log into their android devices. As per Venture Beat the "move toward passwordless authentication is a recognition of password-based security’s fundamental ineffectiveness." Google in its announcement blog said that passkeys are a significantly safer replacement for passwords and other phishable authentication factors. "They cannot be reused, don't leak in server breaches, and protect users from phishing attacks. Passkeys are built on industry standards and work across different operating systems and browser ecosystems, and can be used for both websites and apps," it added. (With inputs from agencies) WATCH WION LIVE HERE You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.

Google Chrome introduces passwordless authentication. Here's how it works

UK's Information Commissioner’s Office (ICO), a data watchdog has opened an investigation into two official World Cup apps over the concerns that Qatari authorities may be using the apps to secretly spy on England fans.

UK's Information Commissioner’s Office (ICO), a data watchdog has opened an investigation into two official World Cup apps over the concerns that Qatari authorities may be using the apps to secretly spy on England fans. “If anyone is concerned about how their data has been handled, they can make a complaint to the ICO,” said a spokesman of the public body. English fans travelling to Qatar have been mandated to download the ‘Ehteraz’ and ‘Hayya’ apps to allow access to the stadiums and Covid contact tracing. However, some security experts are of the view that the app allows Qatari authorities to collect sensitive information which can be used to monitor the fans. The experts have cautioned the travellers to be extremely careful with the photos, videos or documents that they keep on their phones. Moreover, there is a high possibility that vulnerable groups that remain on the edge of archaic Qatari legislations could be monitored through the two apps. Read more: FIFA World Cup 2022: Morocco defeat Cristiano Ronaldo's Portugal 1-0, reach semis for the 1st tim Countries such as Norway and France have already issued advisories to travellers to use the apps on a separate blank phone rather than the one they use for their personal use. The BfDI watchdog in Germany has asserted that Qatari authorities are not coming clean on the kind of data they are harvesting and that there is a 'central server' where the data is being transferred. “Among other things, one of the apps collects data on whether and with which number a telephone call is made. The other app actively prevents the device on which it is installed from going into sleep mode." "It is also obvious that the data used by the apps not only remain locally on the device, but are also transmitted to a central server.” The Qatar World Cup is heading towards its business end. The semifinals begin on Tuesday with the final scheduled for Sunday, next week. (With inputs from agencies) WATCH WION LIVE HERE:

UK data regulator probing World Cup apps mandated by Qatari authorities for spying on English fans

Iran's Atomic Energy Organisation on Sunday (October 23) said that email server of its subsidiary was hacked in a "foreign" attack aimed at drawing "attention". The development has taken place as the country tackles with mass protests triggered by the custodial death of 22-year-old Kurdish woman Mahsa Amini.

Amini died in custody after she was detained by Iran's morality police over 'inappropriate attire'. The nationwide protests her death sparked have seen people even calling on the Islamic regime to step away from power.

A group called Black Reward on Friday issued an ultimatum on Twitter, threatening to release documents on Tehran's nuclear programme unless all "political prisoners, prisoners of conscience and people arrested in the recent protests" were released within 24 hours.

Iran's nuclear agency acknowledged the&nbsp;hacking but the subsidiary downplayed the importance of leaked documents.

"Unauthorised access by a source originating from a specific foreign country to the email system of this company led to the publication of the content of some emails on social media," it said in a statement.Material on social media said to be released by the group on Saturday included a short clip from a purported nuclear site in Iran, as well as documents containing agreements, maps and payslips. 
 
The hacking group claimed &nbsp;it leaked 50 gigabytes of internal emails, contracts and construction plans related to Iran’s Russian-backed nuclear power plant in Bushehr on its Telegram channel.&nbsp;

Iran has previously accused the United States and Israel for cyberattacks that have impaired the country’s infrastructure.

“These illegal efforts out of desperation are aimed at attracting public attention,” the organization said.

The protests in Iran first focused on state-mandated hijab for women but transformed into a serious challenge&nbsp;to the country’s ruling clerics. Protesters now call for the downfall of the Islamic Republic itself.

(With inputs from agencies)

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us <a href="https://www.wionews.com/content-contribution-registration-form">here</a>.

WATCH WION LIVE HERE

<div class="ui-state-default" contenteditable="false">
<div class="twitter-block" draggable="false"><iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" loading="”lazy”" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe></div>
<a class="close-mark close-div" href="#" id="jqclosemark">×</a></div>

&nbsp;

Iran's Atomic Energy Organisation on Sunday (October 23) said that email server of its subsidiary was hacked in a "foreign" attack aimed at drawing "attention". The development has taken place as the country tackles with mass protests triggered by the custodial death of 22-year-old Kurdish woman Mahsa Amini.

Iran's Atomic Energy Organisation on Sunday (October 23) said that email server of its subsidiary was hacked in a "foreign" attack aimed at drawing "attention". The development has taken place as the country tackles with mass protests triggered by the custodial death of 22-year-old Kurdish woman Mahsa Amini. Amini died in custody after she was detained by Iran's morality police over 'inappropriate attire'. The nationwide protests her death sparked have seen people even calling on the Islamic regime to step away from power. A group called Black Reward on Friday issued an ultimatum on Twitter, threatening to release documents on Tehran's nuclear programme unless all "political prisoners, prisoners of conscience and people arrested in the recent protests" were released within 24 hours. Iran's nuclear agency acknowledged the hacking but the subsidiary downplayed the importance of leaked documents. "Unauthorised access by a source originating from a specific foreign country to the email system of this company led to the publication of the content of some emails on social media," it said in a statement.Material on social media said to be released by the group on Saturday included a short clip from a purported nuclear site in Iran, as well as documents containing agreements, maps and payslips. The hacking group claimed it leaked 50 gigabytes of internal emails, contracts and construction plans related to Iran’s Russian-backed nuclear power plant in Bushehr on its Telegram channel. Iran has previously accused the United States and Israel for cyberattacks that have impaired the country’s infrastructure. “These illegal efforts out of desperation are aimed at attracting public attention,” the organization said. The protests in Iran first focused on state-mandated hijab for women but transformed into a serious challenge to the country’s ruling clerics. Protesters now call for the downfall of the Islamic Republic itself. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE ×

Hackers target subsidiary of Iran nuclear agency, demand release of prisoners held in recent protests

hacking

Hacking, News on Hacking, stories on Hacking, articles on Hacking, Hacking stories at Wion, Hacking news, Hacking latest news