Latest cyberattack News | Top cyberattack News Headlines Today | Today India news | Breaking cyberattack News Today | English cyberattack News Headlines - TheDailyGuardian

Iran-Linked Hackers Have Trump Aides’ Emails, What Are They Planning to Leak?

July 1, 2025, 2:15 pm

Iran-linked hackers have threatened to release more stolen emails linked to Donald Trump’s aides, prompting the FBI to open a national security investigation. The group, known online as “Robert,” told Reuters they have 100 gigabytes of data from figures including Susie Wiles, Lindsey Halligan, Roger Stone, and Stormy Daniels. They suggested a possible sale of the emails but did not share specific details or content.

The same group leaked messages during the 2024 election. That material revealed communications about campaign strategy, legal settlements, and financial ties between Trump and Robert F. Kennedy Jr., now his health secretary. Though widely reported, the leaks did not significantly change the outcome of the race, which Trump won.

FBI Targets Iran-Linked Hackers

U.S. Attorney General Pam Bondi called the hack “an unconscionable cyber-attack.” FBI Director Kash Patel said, “Anyone associated with any kind of breach of national security will be fully investigated and prosecuted.” In 2024, federal prosecutors connected the hackers to Iran’s Revolutionary Guards in an official indictment.

Security analysts believe the recent conflict between Iran and Israel may have triggered the hackers’ return. Despite claiming to have “retired,” Robert resumed activity after U.S. strikes on Iran’s nuclear sites. Experts say Iran may now rely on cyber tactics to respond without escalating military conflict.

American Enterprise Institute’s Frederick Kagan explained, “Leaking a bunch more emails is not likely to trigger a resumption of major Israeli/U.S. military activity.”

Hackers Plan Email Sale

The hackers recently told Reuters they plan to sell the stolen emails and want media outlets to report on it. They have not said when or where the emails will appear. Meanwhile, U.S. cyber officials warn private companies to stay alert, noting Iran may still target infrastructure and businesses.

Tehran denies involvement in hacking, but U.S. authorities continue to link the attacks to Iran’s cyber units. The FBI and CISA are closely monitoring the situation.

Israel-Iran Tech War Escalates as Tehran Bans Mobile Phones for Officials

June 17, 2025, 7:48 pm

Israel and Iran are now battling on the high-tech battlefront. The Iranian government has prohibited government officials from using public network-linked mobile phones. The move comes after a high-profile cyberattack on Sepah Bank and growing fears that Israeli intelligence is employing mobile tracking to kill Iranian leaders.

The move marks a new front in the Israel Iran tech war—a war that is being waged with cyber weapons and digital monitoring.

Cyberattack Hits Iran’s Sepah Bank

Sepah Bank, a leading Iranian state-owned bank, was attacked in a massive cyber attack on Tuesday. The Fars news agency said the bank’s computer systems collapsed as a result of the intrusion. Despite assurances by officials that services would resume soon, the attack raised fears about Iran’s vulnerable digital platforms.

Iran Bans Mobile Phones for Officials

Iran’s Cyber Authority responded in turn by issuing a rare directive. It has prohibited all government officials, security units, and workers from using mobile phones linked to public networks. The move comes in the wake of intelligence reports that Israeli forces are employing mobile tracking to target and destroy targets within Iran.

Israel’s intelligence agencies reportedly began pursuing top Iranian agents through their phone signals, prompting the move, according to Channel 12.

Israeli Tech Used in Targeted Killings

The Fars News Agency, which is affiliated with the Islamic Revolutionary Guard Corps (IRGC), stated that Israel has already applied mobile monitoring for executions. It accused Israel of using the practice to execute Ismail Haniyeh in Tehran.

The document further stated that even deactivating a cellular phone does not ensure safety. Rather, it urged the officials to employ safe and anti-tracking communications equipment. One of Tehran legislators went even more extreme in calling for the army and government officials to gather and quarantine all mobile phones at their homes and offices.

Israeli Ambassador Hints at More Surprises

While Iran seals up its lines of communication, Israel seems to be getting ready for more clandestine operations. Israeli US Ambassador Yechiel Leiter dropped hints of forthcoming actions.

“There’s still a lot of things we can do,” he told Merit TV in an interview. “When the dust settles, you’re going to see some surprises on Thursday night and Friday that will make the beeper operation seem simple.”

Israel had previously launched an offensive last September that disabled thousands of Hezbollah communication devices and remotely detonated them, injuring several militants.

Digital Warfront Takes Shape

As conventional diplomacy stalls, cyber warfare and electronic espionage have become methods of statecraft. Iran’s ban on mobile phones is a serious pivot in its domestic security stance. On the other hand, Israel’s public faith in its technological operations takes no ambiguous message.

In the Israel Iran technology war, missiles are no longer the sole danger. Smartphones, servers, and spycraft may now determine the course of regional stability.

Washington Post Emails Hacked: Is China Spying on Their Reporters?

June 16, 2025, 1:39 pm

Washington Post cyberattack investigations began swiftly after several journalists’ Microsoft email accounts were reportedly hacked last Thursday. The suspected intrusion, believed to be the work of a foreign entity, targeted key reporters covering sensitive topics such as national security and Chinese economic policy.

The Wall Street Journal first broke the story, which has since drawn sharp concern from press freedom advocates and cybersecurity experts.

Cyberattack Hits National Security Journalists

The cyberattack directly targeted members of the Washington Post’s national security and economic policy teams. Reports state that hackers hijacked the Microsoft accounts of journalists, especially those covering China, and accessed their work emails. This breach sparked serious concerns about foreign surveillance and espionage.

A source familiar with the matter confirmed that the hackers specifically targeted a select group of journalists without authorisation. Executive Editor Matt Murray immediately launched an internal investigation after he discovered the breach on Thursday.

He addressed the issue in a message to staff and confirmed that the team had already begun reviewing and upgrading security protocols to prevent future attacks. While the source did not identify the responsible country, they strongly suggested that a foreign government orchestrated the breach.

Investigation at the Washington Post

The Washington Post launched a thorough investigation in response to the hack to determine the extent of the incident and secure all impacted accounts. Although the outlet has not released any official announcements, internal communications convey the seriousness of the issue.

After the digital forensics team completes its study, the outlet plans to release more information. Major news organisations have faced similar attacks before. In 2022, News Corp, the parent company of the Wall Street Journal, reported a comparable breach that compromised data and email accounts of multiple journalists.

That attack also prompted suspicions of foreign involvement. Considering the sensitive nature of the Washington Post’s reporting teams, this latest breach could trigger major geopolitical consequences.

China Accuses NSA of Cyberattacks During Harbin Asian Winter Games

April 15, 2025, 1:18 pm

China accused the United States National Security Agency (NSA) in plotting top-level cyberattacks during the Harbin Asian Winter Games at the beginning of February. According to them, the attacks focused on China’s strategic infrastructure and involved US agents as well as American universities. This marked sharp increase in the current cyber and trade tensions between the two superpowers.

NSA agents and US universities identified

Harbin municipal police quoted Xinhua in listing three NSA agents: Katheryn A. Wilson, Robert J. Snelling, and Stephen W. Johnson. Chinese authorities put them on the wanted list for allegedly breaking into China’s energy, transport, water, communications, and military research networks.

The public security bureau in Harbin, NE China’s Heilongjiang Province on Tuesday issued a wanted notice with a bounty for three agents from the US National Security Agency for their involvement in cyberattacks targeting the 9th Asian Winter Games held in the city in February. pic.twitter.com/Y8piAcCxrs

— Global Times (@globaltimesnews) April 15, 2025

China also cited the University of Virginia and Virginia Tech, although what their involvement was in the operation is not stated. The NSA agents are accused of having played a role in previous cyberattacks on Chinese telecommunications giant Huawei as well as other companies.

Windows backdoors and anonymous servers

The cyberattacks were said to reach a peak during the first ice hockey game on February 3. Chinese officials claim that the NSA used “pre-installed backdoors” in Microsoft Windows to infiltrate devices in Heilongjiang province.

To go undetected, the NSA allegedly bought IP addresses in foreign nations and leased servers in Europe and Asia. These efforts were meant to steal sensitive data, such as information about athletes and event registration systems.

Beijing strikesback in cyber narrative

The US has long blamed Chinese state-sponsored hackers for infiltrating US agencies and allies. Washington indicted Chinese hackers last month for hacking into the Defense Intelligence Agency and foreign ministries in Asia.

And now, China is fighting back. While Beijing never acknowledged foreign cyber spying, it has grown increasingly accusatory towards the US, blaming it for similar conduct. In the last month, China attributed two cyberattacks against technology companies to the US with the intent to pilfer trade secrets.

Cyber war escalates with each country accusing the other. These additional allegations against the NSA complicate trade tensions as well. Since both countries fight for technological world dominance, cybersecurity is rapidly evolving into the new great battleground for global diplomacy.

Massive Cyberattack Hits Ukraine’s Railways, But Trains Keep Running

March 25, 2025, 8:49 am

A cyberattack on Monday disabled Ukraine’s online railway ticketing system, leading to long lines at stations. Ukrainian officials blamed Russia, claiming it was an attempt to “destabilize” the country.

Train Services Continue Despite the Hack

Since Ukraine’s railway is essential for both passengers and freight, the disruption caused significant inconvenience. Because of Russia’s 2022 invasion, air travel remains suspended due to frequent missile and drone attacks. However, despite the cyberattack, train operations continued without interruption.

Meanwhile, the online ticketing system remained down for more than 24 hours. On Sunday, the railway company informed passengers about the outage and advised them to buy tickets at stations or onboard trains. Additionally, Ukrzaliznytsia described the cyberattack as “very systemic, unusual, and multi-level” on Telegram.

Passengers Struggle to Buy Tickets

As a result, long queues formed at Kyiv’s central station by Monday morning. Since the booking offices had limited availability, tickets were only sold for travel until Tuesday.

Although Ukrzaliznytsia did not directly accuse Russia, security officials strongly suspected Russian involvement. In fact, both a security official and a government source, who spoke anonymously, pointed to Russian hackers as the likely culprits.

Hackers Aim to Spread Fear

Furthermore, a security official explained that the cyberattack aimed to create psychological pressure and destabilize the country. “It was some hacker group. We think that they are Russians. It is a strong strike but not critical,” a government source added.

Because trains have been Ukraine’s main mode of transportation since 2022, they remain vital for domestic and international travel. Not only do they carry passengers, but they also transport weapons and equipment. In fact, Deputy Prime Minister Oleksiy Kuleba stated that the railway system moved 20 million passengers and 148 million tonnes of freight in 2024.

Railway Officials Respond Swiftly

Despite the attack, officials acted quickly to keep trains running. Ukrzaliznytsia board chairman Oleksandr Pertsovskyi reassured the public on national television. He said, “Operational traffic did not stop for a single moment. The enemy attack was aimed at stopping trains, but we quickly switched to backup systems.”

In conclusion, although the cyberattack disrupted ticketing services, Ukraine’s railway system remains functional. However, the government remains on high alert for future cyber threats.

Polish Space Agency Hacked, Sparking Security Fears And Investigation

March 3, 2025, 3:09 am

Polish cybersecurity solutions have observed unauthorized access to the IT infrastructure of the Polish Space Agency (POLSA), Digitalisation Minister Krzysztof Gawkowski stated on Sunday.

After the attack, officials quickly secured the compromised systems and initiated an intensive probe to identify the attackers. “In relation to the incident, the attacked systems were secured. Intensive operational activities are also ongoing to identify the individuals behind the cyberattack,” Gawkowski said on social media site X.

The Polish government has repeatedly accused Russia of trying to destabilize the country because it backs Ukraine, although Moscow has rejected these claims.

The Polish Space Agency confirmed the cyber attack to the Polish Press Agency (PAP), saying the incident is under examination. To guard sensitive information, the network of POLSA was instantly cut off from the Internet as a precautionary measure.

Official are still evaluating the attack’s effect as they move to bolster cybersecurity protections.

Cybercrime In The Financial Sector

August 9, 2024, 1:40 am

In February 2016, hackers targeted the central bank of Bangladesh and exploited vulnerabilities in SWIFT, the global financial system’s main electronic payment messaging system, trying to steal $1 billion. While most transactions were blocked, $101 million still disappeared. The heist was a wake-up call for the finance world that systemic cyber risks in the financial system had been severely underestimated.

Today, the assessment that a major cyberattack poses a threat to financial stability is axiomatic— not a question of if, but when. Yet the world’s governments and companies continue to struggle to contain the threat because it remains unclear who is responsible for protecting the system. Increasingly concerned, key voices are sounding the alarm.
Financial crime is increasingly being committed over cyberspace, and cybercriminals are using a combination of hacking and social engineering techniques which are bypassing current financial and corporate institution security. With this comes a new umbrella term to capture the evolving landscape which is financial cybercrime. It is a combination of financial crime, hacking, and social engineering committed over cyberspace for the sole purpose of illegal economic gain.

Identifying financial cybercrime-related activities is a hard problem, for example, a highly restrictive algorithm may block all suspicious activity obstructing genuine customer business. Navigating and identifying legitimate illicit transactions is not the only issue faced by financial institutions, there is a growing demand of transparency, fairness, and privacy from customers and regulators, which imposes unique constraints on the application of artificial intelligence methods to detect fraud-related activities.

Modus Operandi of Cybercriminals
While various names have been given to diverse types of frauds, the general modus operandi of a fraudster is any one of the following:

(a) convincing the victim to send money, either by impersonation (fake WhatsApp/FB/Insta, social media profiles) or by giving them a false promise of greater return (investment, crypto, held up custom package etc.)

(b) by taking credentials such as Unified Payments Interface ID (UPI), Personal Identification Number (PIN), One-Time Password (OTP) or Internet banking ID/password from the victim and then using the same on other apps/websites and transferring money without the knowledge of the victim. For this the customer will either be given a fake link which looks exactly like a UPI app screen/banking website or the victim will be conned into installing a screen sharing app. The scammers can also convince the victims over phone to give out those details. When these details are used on official banking apps this gives the fraudsters access to even the Fixed Deposits/Recurring Deposits which are also siphoned out in most cases.

(c) by taking card details and convincing the victim to share OTP. After a fraudster empties a victim’s bank account, the money undergoes a series of circulations in broadly three stages. The first stage is a temporary account into which the fraudsters transfer victims’ money. This account will be used to receive money from various other victims as well. From here, the money is then transferred into a second stage account. The second category of accounts are a group of accounts among which money is circulated. There are a lot of middlemen who are money circulators. Their task is only to receive money from first level bank accounts for a nominal cut. The victim’s money is then split into small parts and then circulated within these accounts, by a person who is sitting in a different corner of the country. After sufficient churning, the money is then transferred into a third stage account which is a sink account. This can be a bank account, an e-wallet etc. Here, the total defrauded amount from a group of victims is re-collected. The money is then withdrawn in a large chunk through conventional methods of either ATMs/cheques or e-wallet cash outlets such as an e-wallet payments bank.

Why Do Cybercriminals Target the Financial Sector?
Monetary gain is one of the biggest reasons the financial sector is often targeted, as is with most cyber attacks throughout all sectors. Because financial data is the core of the finance sector, any attack on the system can cripple any business and cause customers to lose trust in the company. Ransomware attackers also seek out companies that are most likely to pay ransoms to get their data back and seek out companies that have the most valuable data they can sell on the dark web or black market. The financial sector includes banks, insurance firms, mortgage lenders, investment organizations, and other financial institutions that use data to provide better client products and services. This data, however, is frequently sensitive or personal data, such as personally identifiable information (PII), attracting the attention of cybercriminals. Insurance companies, for example, typically collect and process large amounts of personal data to understand the needs of their clients and to provide customized products according to their lifestyles, demographics, risks, and other factors. A supply chain attack on the financial services sector can cause massive disruption since it forms a key part of the nation’s critical infrastructure. Other attacks, such as a distributed denial of service (DDoS) attack on a major banking sector organization, can cause severe disruption, impacting logistics, manufacturing, retail, and other daily services. Denying access to payment methods not only erodes public confidence, which can cause reputational damage, but it also affects private and government organizations by rendering them unable to operate normally.

How can frauds be prevented
As a first, just as how Google accounts do not allow logging in from a new device unless permission is granted by the former, financial institutions must be mandated to replicate this feature in their apps. As soon as a UPI ID, password or OTP is entered in a different device, an alert must be generated in a previous device with no further action being allowed until it is approved by the person. Secondly, the screen share facility must be disabled. Banking and financial apps must disable screen-sharing to run on top of them. And finally, in the bank statement, all banks/NBFCs/SEs must be mandated to provide comprehensible data. Currently only partly printed numbers are shown which even knowledgable customers are unable to understand. The transaction description must contain the receiver’s account/mobile or any other identifying number irrespective of it being within the same bank or to an outside bank.

The Road Ahead
The Bharatiya Nagarik Suraksha Sanhita 2023 which is set to replace the Indian Penal Code of 1861, recognises ‘organised crime’ as a “continuous unlawful activity”. Digital financial frauds are very much covered in this definition. Law enforcement agencies face a lot of difficulties in conducting interstate raids and arrests. It requires a large team and coordinated effort. Interstate digital financial fraud networks must be recognised as a serious crime and bail may be restricted by the Courts. Additionally, digital frauds create a considerable amount of black money when seen from a macro-economic perspective. In conclusion, cybercrime being a subset of crime in general can be dealt like conventional offences, albeit with a different set of tools. Instead of a specialised unit, if the fintech and telecom industries are mandated to take certain preventive steps in their technology and provide data in a manner which enables speedier investigation, the prevention, detection, recovery and conviction will be much more effective. Faster availability of data will make it easier to identify and convict pan-Indian gangs.

Dr.S.Krishnan is an Associate Professor in Seedling School of Law and Governance, Jaipur National University, Jaipur. Ms. Shobha Chauhan did her LLM from NIMS University, Jaipur.

Global Tech Glitch Seen As A Positive Test for Paris Olympics 2024 By IOC

July 21, 2024, 1:41 pm

PARIS, July 20 (Reuters) – The International Olympic Committee (IOC) said on Saturday that a recent global tech outage, which disrupted many services including parts of the Paris Olympics preparations, served as a valuable test for the upcoming Games.

The Tech Outage

A software update from CrowdStrike, a major global cybersecurity firm, caused widespread problems. The outage affected flights, shut down TV broadcasts, and disrupted services like healthcare and banking. It also impacted some of the operations for the Paris 2024 Olympics.

IOC’s Response

IOC spokesperson Mark Adams acknowledged that while the outage caused significant issues, it was a useful rehearsal for managing potential problems during the Games. “Yes, there were some significant problems in the morning, but we handled them quite well. It was a good test for us,” Adams said.

The Paris Olympics are set to begin on July 26. This isn’t the first time the Olympics have faced tech issues; the Pyeongchang 2018 Winter Olympics also experienced cyberattacks.

Preparing for Cyberattacks

Adams emphasized that cyberattacks are a common concern in today’s world, and the Olympic Games are a prime target for such threats. “We have a lot of security measures in place. I can’t go into specifics, but we are very well prepared,” he explained. He mentioned that, despite the close call in Pyeongchang, the IOC is confident in its ability to manage any future issues.

France’s Bid for 2030 Winter Olympics

Adams also touched on France’s bid for the 2030 Winter Olympics, which will be voted on by the IOC next week. The bid from France, which was recommended by the IOC executive board in June, still needs to fulfill two key requirements, including a public partnership contribution from two French regions: Auvergne-Rhone-Alpes and Provence-Alpes-Cote d’Azur.

“France 2030 is a great proposal, and it will be on the agenda for the vote on Wednesday,” Adams said. He noted that recent political instability in France has made the situation a bit more challenging, but he urged everyone to be patient as the final details are worked out.

Looking Ahead

In addition to discussing the 2030 bid, the IOC is focused on ensuring that the Paris Games are well-prepared. Adams reassured that despite the tech outage, the preparations for the Olympics are on track and they are ready for any challenges that may come.

Indonesia Refuses to Pay $8 Million Ransom After Cyberattack Hits National Data Center

June 25, 2024, 9:16 am

Since last Thursday, a cyberattack has disrupted the services of more than 200 government agencies at both national and regional levels, stated Samuel Abrijani Pangerapan, Director General of Informatics Applications with the Communications and Informatics Ministry.

Some government services, such as airport immigration, have been restored, but efforts are ongoing to reinstate other services like investment licensing, Pangerapan told reporters on Monday.

The attackers have held data hostage, demanding an $8 million ransom for access, said Herlan Wijanarko, Director of Network & IT Solutions at PT Telkom Indonesia. He did not provide further details.

Wijanarko mentioned that the company, in collaboration with authorities at home and abroad, is investigating and attempting to break the encryption that has made the data inaccessible.

Communications and Informatics Minister Budi Arie Setiadi confirmed that the government would not pay the ransom. “We have tried our best to recover the data while the team is currently conducting forensics,” Setiadi added.

Hinsa Siburian, head of the cybersecurity agency, reported that they had identified samples of the Lockbit 3.0 ransomware.

Pratama Persadha, Chairman of Indonesia’s Cybersecurity Research Institute, highlighted that this cyberattack was the most severe among a series of ransomware attacks on Indonesian government agencies and companies since 2017. “The disruption to the national data center and the lengthy recovery time indicate that this ransomware attack was extraordinary,” Persadha said. “It reveals that our cyber infrastructure and server systems were not well managed.”

He emphasized that a ransomware attack would have been less impactful if the government had a robust backup system that could automatically take over during a cyberattack.

In 2022, Indonesia’s central bank was targeted by ransomware, but public services were unaffected. In 2021, the health ministry’s COVID-19 app was hacked, compromising the personal data and health status of 1.3 million people.

Last year, Dark Tracer, an intelligence platform monitoring cyber threats, reported that the LockBit ransomware group claimed to have stolen 1.5 terabytes of data from Indonesia’s largest Islamic bank, Bank Syariah Indonesia.

This Pakistani Group Is Targeting Indian Institutions Via Messaging Apps And Programming Language

May 27, 2024, 6:13 pm

A Pakistani threat group identified as Transparent Tribe has emerged as a significant concern, as it is reportedly targeting many Indian institutions, which include government and military entities.

As per Blackberry’s Research & Intelligence team, this group is making use of various programming languages such as Python, Golang and Rust, and they are also making the use of different web services like Telegram, Discord, Slack and Google Drive.

In addition, this report also revealed, that these activities took place from late 2023 to April 2024. most likely, it will continue.

Further, the transparent tribe mainly uses phishing emails, as the common mode of delivery for its payloads, making use of ZIP archives or links.

The blackberry later discovered a remote IP address, which belonged to Pakistani-based mobile data network operator. Which was embedded within spear-phishing email.

Besides these known tactics, this group has also introduced new additions.

Earlier in October 2023, they utilized ISO images as a newer mode of attack, as stated by blackberry, this new golang now comes with “all-in-one” espionage tools, which enjoys the capability of finding & exfiltrating files with popular file extensions, taking screenshots, give commands, upload and download files.

Brief Introduction of Transparent Tribe

Also known by other names like APT36, ProjectM, Mythic Leopard or Earth Karkaddan, this cyber surveillance threat group has been operating with Pakistani nexus since 2013.

This group for many years, is conducting espionage operations against various Indian institutions especially against education and defense sector.

In addition to Transparent Tribe, another Pakistani APT group known as Side copy has also escalated its cyberattack strategies targeting Indian sectors.

Which of These Four-Digit PINs Are Most Preferred by People? Recent Cybersecurity Study Reveals

May 17, 2024, 12:29 pm

Recently, a report by Checkpoint Software Technologies Ltd has revealed, that India has experienced a 33 percent increase in cyberattacks during the first quarter of 2024.

One of the major factors is attributed to the use of Weak PINs. Which are easily guessed by cyber criminals to breach your system.

Due to their easily guessable nature, these cybercriminals make use of these pins. Thus, posing a risk to your security. Especially PINs like birth years, birthdates, or repetitive passwords, which can be guessed by anyone.

So, a new cybersecurity study is released by Information is Beautiful, which lists the top 10 common 4-digit PINs.

These Following numbers are: –

-1234

– 1111

– 0000

– 1212

– 7777

– 1004

– 2000

– 4444

– 2222

– 6969

However, the study has also released some of the least used PINs used by the people.

These uncommon 4-digit PINs are the following: –

– 8557

– 8438

– 9539

– 7063

– 6827

– 0859

– 6793

– 0738

– 6835

– 8093

Tips To Ensure Your Safety

However, there are many ways through which a cyber-attack on your account can be prevented.

By making the use of Password Manager, an extra layer of protection is added, as it is used for the generation of random, secure codes, that aren’t really dependent on known personal information.

As repeatedly advised by many experts, a good PIN shouldn’t contain any personal information and should be difficult to guess.

UK Ministry of Defence Faces Major Data Breach, Suspects China Behind Cyberattack

May 7, 2024, 12:55 pm

The UK Ministry of Defence (MoD) is grappling with a significant data breach, as reported by Sky News. The breach has exposed sensitive information belonging to service personnel and veterans, potentially including names and bank details. According to Sky News’ investigative sources, China is suspected to be behind the cyberattack. The targeted system, distinct from the MoD’s main computer network, has been shut down for investigation and assessment.

While the MoD has not officially confirmed the source of the attack or the full extent of the breach, the incident underscores serious concerns regarding the security of personnel data and the potential repercussions for those affected.

China is alleged to have made multiple hacking attempts targeting MoD employees, including personnel involved in a payroll system that encompasses current service members and some veterans. Primarily, the exposed information comprises names and bank details, and assurances have been given that all salaries will be disbursed this month.

Conservative MP and former soldier Tobias Ellwood expressed to Sky News his belief that China may have targeted financially vulnerable individuals with the aim of coercion in exchange for cash.

According to the BBC, Defence Secretary Grant Shapps is scheduled to provide an update to Members of Parliament in the Commons on Tuesday regarding the hack. He is anticipated to outline a comprehensive response plan, including measures to safeguard affected servicemen and women.

The recent update to the government’s defense strategy warned of a significant rise in cyberattacks by both state and non-state actors, encompassing spyware, ransomware, and offensive hacking tools.

This incident is not the first time China has been implicated in cyber activity directed at the UK. In March 2024, the UK government publicly accused China of a cyberattack in August 2021 that compromised voter data held by the Electoral Commission.

Further exacerbating concerns, the National Cyber Security Centre (NCSC) attributed a cyberattack in December 2023 aimed at disrupting UK political processes to Russian intelligence, highlighting ongoing efforts by multiple state actors to undermine UK cybersecurity.

New York Capitol hit by cyberattack, budget deal delayed

April 18, 2024, 1:45 pm

The computer infrastructure of the New York State Legislature appeared to be the target of an alleged cyberattack overnight on Tuesday, delaying the already weeks-overdue state budget negotiations, reported The Hill.

New York Governor Kathy Hocul stated that the cyberattack took place in the early hours of Wednesday, prompting a quick response from cybersecurity officials.

“Our understanding right now is that it will take a little bit longer to deal with the legislative side of it because a lot of data is included in the computers,” Hochul said of the budget process in a WNYC radio appearance with Brian Lehrer on Wednesday, according to The Hill.

The hardest hit, according to Gothamist, a New York City-centric blog website operated by New York Public Radio, was the legislature’s bill drafting office, which is in charge of deciding on the state budget’s final wording.

With regard to the state budget, which was due at the end of March, legislators are already 17 days behind schedule. The bill drafting office is responding to the attack by using a computer file system that was replaced more than 20 years ago, which dates back to 1994, The Hill reported.

Hochul announced on Monday that negotiations on a USD 237 billion budget proposal had been agreed upon by parliamentarians and that this week’s proceedings were anticipated to proceed.

According to The Hill, the members of Congress are concerned about the growing prevalence of cyberattacks and the possible hazards they pose to businesses and governments, which has centred attention on Washington in recent months.

A particular warning for state water and wastewater systems was issued by the Biden administration last month, alerting people to the possibility that attacks could be launched against vital infrastructure.

boAt Faces Major Data Breach: 7.5 Million Customer Records Compromised

April 8, 2024, 1:33 pm

Recently, a cyberattack compromised the personal information of over 7.5 million customers of boAt, a well-known maker of audio products and smartwatches. The data breach exposed sensitive information such as names, addresses, phone numbers, email IDs, and customer IDs, which subsequently surfaced on the dark web. As of now, boAt has not released an official statement regarding the incident.

According to Forbes, a hacker going by the name ShopifyGUY disclosed a breach of boAt Lifestyle’s database on April 5. The hacker released files with the breached data, reportedly comprising 7,550,000 entries, on a dark web forum. This incident presents a considerable risk to the impacted customers, potentially exposing them to financial fraud, phishing scams, and identity theft.

Experts have raised concerns about the potential fallout for boAt, including diminished customer trust, legal challenges, and reputational harm. Rakesh Krishnan, a senior threat analyst at NetEnrich, observed that while the hacker known as ShopifyGUY is a newcomer to the hacking scene, the verified nature of the leaked data could enhance their standing among cybercriminals, potentially leading to more data being sold in the future.

boAt, established in 2016 by Aman Gupta and Sameer Mehta, has become known for its budget-friendly audio products and wearables, rising to become India’s second most favored wearable brand. Even after a breach, the Gurugram-headquartered firm has experienced considerable growth, with its sales surpassing Rs 3,000 crore in March 2023.

The company has encountered financial difficulties previously, reporting a net loss of ₹129.4 crore in the fiscal year 2022-2023. Nevertheless, boAt continues to be a significant competitor in the consumer electronics sector, contending with brands such as Fire-Boltt, Noise, Xiaomi, and Samsung.

As cybersecurity threats become more sophisticated, it is imperative for companies such as boAt to prioritize the protection of customer data and to implement stringent security measures to guard against potential future breaches.