Question

We see many examples of state sponsored cybercrime including stealing information and spying, spreading fake news, damaging online systems etc.. Give two examples of this. Can anything be done to prevent this type of thing? Is this something to worry about?

Answer 1

Two state-sponsored cybercrime examples:

Below are two state-sponsored cybersecurity attacks on government bodies, specifically on the Indian government. These state-sponsored attackers are highly capable and highly motivated.

* An example is a cybercrime that is involved in spreading the damaging reputation of a country. This is carried out by a Pakistan state-sponsored group identifying itself as ‘IOK’. There are possibilities these state-sponsored hackers could target and attack India's health ministry and corporate donors to the PM Cares Fund, which is The Prime Minister's Citizen Assistance and Relief in Emergency Situations Fund created following the COVID-19 pandemic in India. These hackers carried out these cybercrime activities organizing the acts and coordinating with one another in the hackers’ Dark Web communities.

* A cybercrime that is involved in cyber-espionage operations is another example.
A hacker group called APT36 carries out cyber-espionage operations intending to collect sensitive information from India that supports Pakistani military and diplomatic interests.

Other examples are SARS, H1N1, and avian flu-related scams that have circulated online for more than ten years now.

Recently, there has been an increase in state-sponsored cybercrime across the world with regard to the Covid-19 pandemic. These cybercrimes are carried out by more than twelve government-backed attacker groups who are using Covid-19 related themes as a lure for malware and phishing attack attempts, trying to make their targeted users or victims click malicious links and download malicious files. This attack is carried out to steal information.

Also, these state-sponsored hackers have been a threat to Indian corporates. IT services from certain companies in India experiences a Maze ransomware attack and also impacting their clients.

Yes, we can do certain things to prevent this type of cybercrime or cyberattack. Depending on the cybercrime, appropriate measures are to be taken to stop such activities. An understanding should be developed with like-minded countries about non-accepted state behavior when using ICT. We should hold a dialogue with non-like-minded countries about red lines and how state-sponsored cyber-attacks should be handled.

* There should be sanctions, legal charges, and jurisdiction with respect to cybercrimes, especially state-sponsored cybercrimes.
* Risk escalation should be prevented.
* It is essential for the secure communication channels to be maintained for governments and public authorities.
* There should be proper and adequate education, prevention, digital literacy, and financial support.
* It is helpful if crime and state-sponsored activties are differentiated from one another.
* It requires to identify new facilities which in turn requires protection and evaluation of existing safeguards.

Yes, we should be worried about such cybercrime. In fact, we should be worried about any and all and from small to big cybercrimes, as they, from small to a big extent, directly or indirectly, knowingly or intentionally are causes for future dangerous cyberattacks or crimes. If we do not worry about this, national security would be at risk.