Five Eyes Warn Of Russian Cyber Attacks

The Five Eyes Intelligence Alliance, which is made up of agencies from the US, Britain, Australia, Canada and New Zealand, has said Russia could launch the attacks as a response to sanctions imposed following its invasion of Ukraine. It said the war could expose organisations everywhere to cyber crime.

Critical infrastructure organisations across Britain have been urged to ramp up their cyber security defences as they face a heightened risk of Russian state-sponsored cyber attacks. Organisations around  the world have also been warned of the potential threat of Russian cyberattacks.

According to the alert, "evolving intelligence" suggests hackers within the Russian government are seeking to engage in "malicious cyber activity" in response to the "unprecedented economic sanctions" imposed on Russia following its invasion of Ukraine. There is also concern that hackers are targeting critical infrastructure in countries that have provided “materiel support” to Ukrainian forces.

There are also risks posed by numerous cybercrime groups who have pledged their support to Russia. Some groups have also threatened to conduct cyber operations against countries and organisations providing materiel support to Ukraine, while other groups have conducted disruptive attacks against Ukrainian websites as well. 

Among the identified cyber crime groups that have aligned with the Russian government include Primitive Bear and Venomous Bear, which have been identified as cyber threat groups of Russian origin that have not previously been directly connected to the Russian government.

In response to the increased risk, the Five Eyes alert outlines a number of immediate actions critical infrastructure organisations can take to “prepare for and mitigate potential cyber threats”.

The British government minister responsible for cyber security, Steve Barclay, the told The Daily Telegraph newspaper  "Cyber attacks recognise no physical or geographical boundary and it has never been more important to plan and invest in cyber resilience." 

Speaking on Irish TV,  Pat Moran, Cybersecurity Leader at PwC said although there have been no significant cyber attacks to date, the situation is now extremely dangerous. "We have seen the Conti Russian criminal gang, who we know from the HSE attacks last year, have already gone public and said they will attack the critical infrastructure of any country who gets in the way of what Russia is trying to do... So this is quite a worrying area for the world." 

If these cyberattacks do take place, Moran said they will be focused on critical infrastructure. "The concentration will be on areas where organisations and individuals are depending on critical services - so some examples of that would be water, energy and transportation.. These are particular areas where Governments across the world are helping organisations to make sure their defence mechanisms are robust and resilient enough to sustain an attack." 

A recent PwC report on Economic Fraud & Crime reveals that almost half of businesses have reported experiencing fraud or financial crime over the last two years.

PwC surveyed 1,296 business leaders from across 53 countries and found that 70% of the organisations that experienced new incidents of fraud said it was as a result of Covid-19 disruptions. The survey shows that nearly two-thirds of tech, media and telecommunications businesses have experienced some form of fraud over the last two years - the highest incidence of any industry. The report also reveals a reveals a rise in supply chain fraud.

According to the findings, larger companies are at greater risk for fraud, with nearly 20% of such companies experiencing fraud costing over $50 million. In this year's survey results, cyber crime came in ahead of customer fraud, the most common global crime in 2020, by a substantial margin.

PWC:      Reuters:   Bloomberg:     RTE:    Hacker News:    Independent:      Telegraph:     ZDNet:    

You Might Also Read: 

Cyber Criminals Volunteer For War In Ukraine:

 

« Improve Your Password Security
Predictive Analytics Are The Future For Cyber Security »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of completely automatic, fully encrypted online, cloud backup.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

ON-DEMAND WEBINAR: Future-proof your security with Secure Access Service Edge (SASE)

ON-DEMAND WEBINAR: Future-proof your security with Secure Access Service Edge (SASE)

Watch this webinar to explore the Security orchestration, automation, and response (SOAR) paradigm, its relationship with organization IT practices, and its role in your security strategy.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Defense Advanced Research Projects Agency (DARPA)

Defense Advanced Research Projects Agency (DARPA)

DARPA's mission is to develop breakthrough technologies for national security. The Information Innovation Office undertakes cyber security activities.

Nuix

Nuix

Nuix specialise in extracting knowledge from unstructured data. Applications include Digital Forensics, Cybersecurity Intelligence, Information Governance, eDiscovery.

Clavister

Clavister

Clavister is a network security vendor delivering a full range of network security solutions for both physical and virtualized environments.

Recorded Future

Recorded Future

Recorded Future arms security teams with threat intelligence powered by patented machine learning to lower risk.

Neupart

Neupart

Neupart provides Information Security Management System, Secure ISMS, allowing organisations to automate IT Governance, Risk and Compliance management.

ESL Bangladesh

ESL Bangladesh

ESL is the Largest IT Infrastructure & Telecom Service Provider in Bangladesh.

Navarino

Navarino

Navarino is the maritime industry’s most advanced communications and connectivity company. We develop advanced technologies and innovative IT solutions including cyber security.

Shieldfy

Shieldfy

Shieldfy is a cloud-based security shield for your website to protect it from cyber attacks and malwares.

CounterFlow AI

CounterFlow AI

CounterFlow AI is an Artificial Intelligence start-up developing a network forensics platform for threat hunting.

SafeHouse Technologies

SafeHouse Technologies

SafeHouse is a cloud-based, high-end cybersecurity platform that can secure and insure any device that is connected to it.

iHLS Startups Accelerator

iHLS Startups Accelerator

iHLS Accelerator is the first startup accelerator in the world in the security and homeland security field.

Secure Technology Integration Group (STIGroup)

Secure Technology Integration Group (STIGroup)

Secure Technology Integration Group, Ltd. (STIGroup) is an innovative firm that provides CyberSecurity consulting, secure IT engineering, managed security services, and human capital solutions.

InfoSec Conferences

InfoSec Conferences

InfoSec Conferences is an online directory of infosec conferences. We list every single Information Security conference, event and seminar within every niche in Cybersecurity.

White Cloud Security

White Cloud Security

White Cloud is a cloud-based Application Trust-Listing security service that prevents unauthorized programs from running on your computers.

SolCyber

SolCyber

SolCyber, a Forgepoint company, is the first modern MSSP to deliver a curated stack of enterprise strength security tools and services that are accessible and affordable for any organization.

Oman Data Park

Oman Data Park

The Data Park is Oman’s premier IT Managed Services provider. We offer a superior Tier 3 Data Center network providing cyber security and cloud services.