Massive cyberattack targets US, hits other countries

Published December 19, 2020
A devastating cyberattack on US government agencies has also hit targets worldwide with the list of victims still growing, according to researchers, heightening fears over computer security and espionage. — Reuters/File
A devastating cyberattack on US government agencies has also hit targets worldwide with the list of victims still growing, according to researchers, heightening fears over computer security and espionage. — Reuters/File

WASHINGTON: A devastating cyberattack on US government agencies has also hit targets worldwide with the list of victims still growing, according to researchers, heightening fears over computer security and espionage.

Microsoft said late on Thursday that it had notified more than 40 customers hit by the malware which security experts say came from hackers linked to the Russian government and which could allow attackers unfettered network access.

“While roughly 80 percent of these customers are located in the United States, this work so far has also identified victims in seven additional countries,” Microsoft president Brad Smith said in a blog post.

Smith said the victims were also found in Canada, Mexico, Belgium, Spain, Britain, Israel and the United Arab Emirates.

“It’s certain that the number and location of victims will keep growing,” Smith said, echoing concerns voiced this week by US officials on the grave threat from the attack. “This is not ‘espionage as usual,’ even in the digital age,” Smith said.

“Instead, it represents an act of recklessness that created a serious technological vulnerability for the United States and the world.” John Dickson of the security firm Denim Group said many private sector firms which could be vulnerable are scrambling to shore up security, even to the point of considering rebuilding their servers and other equipment.

“Everyone is in damage assessment now because it’s so big,” Dickson said.

“It’s a severe body blow to confidence both in government and critical infrastructure.” The threat comes from a long-running attack which is believed to have injected malware into computer networks using enterprise management network software made by the Texas-based IT company SolarWinds, with the hallmarks of a nation-state attack.

The National Security Agency, the secretive US military intelligence operation, called for increased vigilance to prevent unauthorized access to key military and civilian systems.

“The recent SolarWinds Orion code compromise is one serious example of how on-premises systems can be compromised, leading to abuse of federated authentication and malicious cloud access,” the NSA said.

Analysts have said the attacks pose threats to national security by infiltrating key government systems, while also creating risks for key infrastructure controls for systems such as electric power grids and other utilities.

The US Cybersecurity and Infrastructure Security Agency (CISA) said US government agencies, critical infrastructure entities, and private sector organizations had been targeted by what it called an “advanced persistent threat actor.” CISA did not identify who was behind the malware attack but private security companies pointed a finger at hackers linked to the Russian government.

US Secretary of State Mike Pompeo also suggested involvement by Moscow on Monday, saying the Russian government had made repeated attempts to breach US government networks.

President-elect Joe Biden expressed “great concern” over the computer breach while Utah Senator Mitt Romney blamed Russia and slammed what he called “inexcusable silence” from the White House.

Romney likened the cyberattack to a situation in which “Russian bombers have been repeatedly flying undetected over our entire country.” Senator Marco Rubio told Fox News: “It is massive. It is still, I would argue, probably persistent. It is still ongoing... It’s a grave risk to federal, to state, to local governments, to critical infrastructure, to the private sector.”

CISA said the computer intrusions began in at least March 2020 and the actor behind them had “demonstrated patience, operational security and complex tradecraft.”

Published in Dawn, December 19th, 2020

Opinion

The rich boys
Updated 22 Sep 2021

The rich boys

Such is the toxic masculinity of these rich boys that no one is safe from it.
Going nuclear
22 Sep 2021

Going nuclear

Australia may regret its ‘forever partnership’ with the US.
Politics’ winged chariot
Updated 21 Sep 2021

Politics’ winged chariot

When others are shifting gears to election preparations, the PML-N is caught in its internal woes.

Editorial

22 Sep 2021

Interest rate hike

THE State Bank’s decision to raise its key interest rate by 25bps to 7.25pc underpins its acceptance of emerging...
22 Sep 2021

PCB chief’s challenge

RAMIZ Raja was distraught, frustrated and angry. And the Pakistan Cricket Board chairman made no attempt to hide his...
22 Sep 2021

No need for secrecy

THE government should not make a mountain out of the Toshakhana molehill. That would only encourage speculation of...
What’s the game?
21 Sep 2021

What’s the game?

Such brinkmanship is being fuelled by incendiary rhetoric as well as inflexible demands of a unilateral nature.
21 Sep 2021

Gas price hike

THE proposed hike of 24pc-37pc in the gas price of the top 23pc residential consumers, who account for 43pc of the...
21 Sep 2021

Green Line buses

AT long last, the first batch of vehicles for Karachi’s Green Line bus project arrived from China on Sunday,...