26 mars 2020 | Local, C4ISR, Sécurité

All-volunteer cyber civil defence brigade assembles to fight COVID-19 hackers

All-volunteer cyber civil defence brigade assembles to fight COVID-19 hackers

Number of online attacks on health care institutions jumped 475 per cent in one month, says one report

Murray Brewster

Civil defence used to involve air raid wardens, ambulance drivers and rescue teams.

That was at the height of the Cold War, and the hot wars of the 20th century that preceded it. These days, it means taking the fight online — against hackers and cyber criminals looking to take down or ransom critical infrastructure, such as hospitals.

The COVID-19 crisis has prompted Canadian IT professionals to form an all-volunteer cyber defence team to protect Canada's hospitals, health-care providers, municipalities and critical infrastructure from online attacks during the COVID-19 crisis.

The SecDev Group, which has pioneered advanced analytics and cyber safety, has been spearheading the recruitment effort and has asked information technology professionals to step up and provide preventative measures and remedial services.

'Preying on fear'

"Hackers are targeting hospitals and health care providers, preying on their distraction, fear and anxiety and their hope for a cure," said Rafal Rohozinski, principal and CEO of the SecDev Group

"Posing as public health officials from the World Health Organization, [the] Centers for Disease Control and UNICEF, cyber criminals are flooding hospitals, medical laboratories, vaccine testing facilities, municipalities and critical service providers with phishing emails, forcing some to shut down."

Twelve companies and associations have signed on to the initiative. Together, they plan to set up a secure online exchange to match high-tech professionals — who will volunteer their services free of charge — with agencies and institutions that need help to shore up their cyber protection, or to deal with an intrusion.

"It's both a patriotic and public service reflex," said Rohozinski. "If the internet goes down, and in particular if critical institutions that we count on — like hospitals, like cities, like utilities — start to be ransomed or start to go down because of cyber malfeasance, we're all in a lot of trouble."

The exchange website is still in the process of being built, but Rohozinski said it will launch within days.

Online attacks exploded since pandemic began

Across the globe, the number of coronavirus-related attacks on health-care institutions has increased by 475 per cent in just the past month, according to a SecDev Group assessment.

At the moment, no Canadian hospitals or institutions have reported being attacked.

Rohozinski said there have been signs of trolling by both cyber criminals and so-called "state actors" — including some of the Russian groups identified by U.S. intelligence as being behind the tampering in the 2016 presidential election.

The Communications Security Establishment (CSE), Canada's electronic intelligence service, has said it has taken down some fake websites that were posing as government departments and institutions and trying to scam people.

The U.S. Health and Human Services Department was recently targeted and the FBI has warned that hospitals in the states with the highest rates of infection — California, New York and Washington — should be on the alert for attacks from foreign actors.

Hammersmith Medicines Research, a British company that is on standby to perform medical trials on any potential COVID-19 vaccine, was hit with an online attack last week, according to published reports.

Over the last few days, according to a Bloomberg news report, hackers targeted hospitals in Paris with a major cyberattack. A hospital in the Czech Republic was also hit last week in what is thought to have been a ransomware attack, which forced administrators to take the network offline.

Forbes Magazine reported late last week that the cybercrime groups behind the DoppelPaymer and Maze ransomware threats had promised not to target health care organizations during the COVID-19 crisis — but at least one of the groups was reportedly linked to a recent attack.

Remote work networks are vulnerable

An executive at one of the companies now volunteering for the cyber civil defence initiative said one area where institutions likely need help is in protecting the virtual private networks (VPNs) of employees who've been forced to work from home because of the crisis.

Robert Mazzolin, the chief cyber security strategist at the RHEA Group, said the VPN systems used by most hospitals, power plants and other utilities were never designed to support so many secure connections outside the workplace.

"The world is fundamentally different than it was a week ago and I don't think any large corporation or institution realistically would have been prepared to see virtually its entire workforce be working from home via remote connections," said Mazzolin, a former brigadier-general who was responsible for cyber operations in the Canadian military.

"That places a large stress on an institution's communications workforce. The threats out there, including ransomware — it's important to be able to defend VPNs that are stretched well beyond their normal capacity and limits."

He said his company and staff, who regularly work for the European Space Agency, will be able to provide insight and capability that will complement existing networks.

The mandate of CSE is to protect the federal government's electronic network and — through its cyber security centre — to provide advice and guidance to people and businesses looking for cyber security information.

Rohozinski said there's a difference between providing advice and actively helping in the defence and the initiative has CSE's support.

https://www.cbc.ca/news/politics/covid19-cyber-companies-1.5508570

Sur le même sujet

  • exactEarth and MarineTraffic Announce Channel Partner Agreement

    13 juin 2019 | Local, C4ISR

    exactEarth and MarineTraffic Announce Channel Partner Agreement

    CAMBRIDGE, ON and ATHENS, Greece, June 13, 2019 /CNW/ - exactEarth Ltd. ("exactEarth") (XCT:TSX), a leading provider of Satellite-AIS data services, and MarineTraffic, a leading global provider of ship tracking and maritime intelligence, announce that they have entered into a three-year channel partner agreement (the "Agreement"). Under terms of the Agreement, MarineTraffic will deploy exactEarth's exactView RT data into its online maritime services products to help bring real-time, business-critical and actionable vessel information to maritime industry participants. exactView RT consists of 58 operational payloads and seven orbital spares that were designed and built by Harris Corporation and that are hosted onboard the Iridium NEXT constellation of satellites, which is owned and operated by Iridium Communications Inc. exactView RT's advanced maritime payloads cover the entire maritime VHF radio band and leverage the unique cross-linked architecture of the Iridium NEXT satellite constellation to deliver AIS and other vessel-based VHF data services from more than 500,000 vessels, anywhere on the globe, relaying that data securely to customers in real-time. MarineTraffic owns the world's preeminent ship-tracking website, which attracts approximately six million unique visitors per month. The company operates 2,000 AIS stations in more than 165 countries around-the-world, delivering the most comprehensive AIS coastal tracking facility available today. For companies in the maritime sector, MarineTraffic is a preferred tool for fleet management, alert and notification systems, vessel particulars, port statistics and actionable intelligence through API. "MarineTraffic is a leading provider of vessel movement information services and we look forward to contributing to their ongoing efforts to enhance their customer experience," said Peter Mabson, President & CEO of exactEarth. "This Agreement opens-up another channel for our Satellite-AIS data services and is a further positive indication of the response we have received from customers, prospects and partners regarding the real-time functionality of exactView RT. With its superior vessel detection, rapid update rate and reliability, exactView RT is becoming a "must-have" data source on major data platforms throughout the maritime industry." Argyris Stasinakis, Partner Business Development, MarineTraffic said, "The addition of exactEarth's high resolution, real-time AIS data means that MarineTraffic is now the go-to source for any professional seeking the most comprehensive view of shipping movements. Users of our platform exploiting our ocean coverage services will see enhanced functionality thanks to the higher frequency, coverage and less than one-minute latency delivered by the exactView RT satellite constellation. This means that our popular predictive services will be more accurate than ever before, allowing our customers to monitor and plan more precisely." About MarineTraffic With headquarters in Athens and international offices in the UK and Singapore, MarineTraffic is the global ship tracking and maritime intelligence provider. Leveraging AIS technology, MarineTraffic is at the forefront of a movement taking shipping into a new digital era. The company's range of services deliver increased transparency to the shipping markets through the provision of high-quality data for analysis, which supports forecasting and informed decision making. MarineTraffic receives analyses and stores millions of vessel positions every day. This data is collected through the world's most extensive network of AIS stations before being enriched to deliver business-critical information. Current positions and vessel's tracks are displayed on a Live Map, with historical positions, vessel details, port conditions and statistics being made available throughout the website. www.marinetraffic.com About exactEarth Ltd. exactEarth is a leading provider of global maritime vessel data for ship tracking and maritime situational awareness solutions. Since its establishment in 2009, exactEarth has pioneered a powerful new method of maritime surveillance called Satellite-AIS and has delivered to its clients a view of maritime behaviours across all regions of the world's oceans unrestricted by terrestrial limitations. exactEarth has deployed an operational data processing supply chain involving a constellation of satellites, receiving ground stations, patented decoding algorithms and advanced "big data" processing and distribution facilities. This ground-breaking system provides a comprehensive picture of the location of AIS equipped maritime vessels throughout the world and allows exactEarth to deliver data and information services characterized by high performance, reliability, security and simplicity to large international markets. For more information, visit www.exactearth.com Forward-Looking Statements This news release contains statements that, to the extent they are not recitations of historical fact, may constitute "forward-looking statements" within the meaning of applicable Canadian securities laws. Forward-looking statements may include financial and other projections, as well as statements regarding exactEarth's future plans, our ability to continue as a going concern, objectives or economic performance, or the assumptions underlying any of the foregoing, including statements regarding, among other things, expectations of our exactView RT offering relative to competitors, timing of the achievement of real-time global vessel tracking via our second-generation constellation, timing expectations with respect to launch of satellites, expectations of the exactView RT capabilities driving growth, growth opportunities for the Company in the maritime information services market and the cost and revenue share in connection with the Harris Agreement. exactEarth uses words such as "may", "would", "could", "will", "likely", "expect", "anticipate", "believe", "intend", "plan", "forecast", "project", "estimate" and similar expressions to identify forward-looking statements. Any such forward-looking statements are based on assumptions and analyses made by exactEarth in light of its experience and its perception of historical trends, current conditions and expected future developments, as well as other factors exactEarth believes are appropriate under the relevant circumstances. However, whether actual results and developments will conform to exactEarth's expectations and predictions is subject to any number of risks, assumptions and uncertainties. Many factors could cause exactEarth's actual results, historical financial statements, or future events to differ materially from those expressed or implied by the forward-looking statements contained in this news release. These factors include, without limitation: uncertainty in the global economic environment; fluctuations in currency exchange rates; delays in the purchasing decisions of exactEarth's customers; the competition exactEarth faces in its industry and/or marketplace; the further delayed launch of satellites; the reduced scope of significant existing contracts; and the possibility of technical, logistical or planning issues in connection with the deployment of exactEarth's products or services. https://www.newswire.ca/news-releases/exactearth-and-marinetraffic-announce-channel-partner-agreement-865863568.html

  • Aero Montreal supports appeal to the federal government

    13 juillet 2020 | Local, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Aero Montreal supports appeal to the federal government

    Aero Montreal said it fully supports the arguments presented by the Canadian aerospace industry to the federal government and shares its concerns about the lack of support for the sector in Finance Minister Bill Morneau's recent economic update. This new snapshot makes no reference whatsoever to measures that would allow the industry to emerge from the crisis. That is why Aero Montreal is reiterating the importance of implementing a Canada-wide aerospace strategy, with specific measures dedicated to our sector, as soon as possible. By putting the aerospace industry at the heart of economic policies for more than 80 years, both in Quebec and in Canada, governments have succeeded in making aerospace an industry that contributes more than $25 billion to the country's GDP. Amidst the COVID-19 crisis, when other jurisdictions around the world are redoubling their efforts to support their aerospace industry, Quebec is supporting its “champion.” But the Canadian government is still waiting and Canada continues to fall behind on international markets. Aero Montreal is sounding the alarm on behalf of the Québec aerospace industry, which represents 49 per cent of the Canadian aerospace sector's workforce and 57 per cent of its sales. In Canada, research and development is at the heart of the aerospace industry, with an investment of $1.4 billion per year, more than 70 per cent of which is carried out in Quebec. In times of economic recovery, innovation is critical. For example, France is banking on an innovative recovery with a carbon-neutral aircraft. The United States has repeatedly demonstrated its support for the defence sector, allowing for the development of leading edge technologies that can be transferred to commercial aircraft. Canada must, without further delay, continue to invest in this strategic sector to position itself in this race for innovation. In order to succeed, our industry must be able to retain its highly-skilled workforce and prevent the ecosystem from being eroded. “The unprecedented mobilization of all players in the aerospace industry illustrates the intensity of the crisis we are experiencing. Through a collective approach, we are advocating the urgent need for a specific strategy dedicated to our sector that will accelerate the recovery, while emphasizing that this cannot be achieved without the help of the federal government,” said Suzanne M. Benoît, president of Aero Montreal. https://www.skiesmag.com/press-releases/aero-montreal-supports-appeal-to-the-federal-government/

  • Bombardier calls for 'fair competition' as Ottawa eyes sole-source contract for surveillance planes | CBC News

    1 juin 2023 | Local, Aérospatial

    Bombardier calls for 'fair competition' as Ottawa eyes sole-source contract for surveillance planes | CBC News

    The Quebec-based jet manufacturer Bombardier is calling on the federal government to launch a "fair competition" to replace the Royal Canadian Air Force's surveillance planes.

Toutes les nouvelles