Surfshark created the report in partnership with independent cybersecurity experts and used user data collected from over 27,000 breached databases that appeared online. The researchers sorted data based on specific data points like user countries. The users’ locations were ascertained using their email or website domain name, country, city, coordinates, IP address, and other data.

According to Agneska Sablovskaja, lead researcher at Surfshark, there was a 68 per cent global decline in account breaches in 2022, with countries like the United States, India and Brazil improving significantly compared to 2021. Meanwhile, Indonesia, China and Russia experienced big surges in data breaches compared to the previous year.

India ranks in the top 10

The 4.7 million email accounts in India that were breached in 2022 represent a 94 per cent decrease when compared to the previous year. This is why India moved from 3rd place to 7th place in the list of countries that suffered the most data breaches.

The biggest breach that affected users in the country was the Swacch city data breach that happened in January, where 91,800 email accounts were breached. This amounts to 2 per cent of all the breaches that happened during the year. The Flipkart and ClickASnap data breaches were also massive, being responsible for 69,700 and 44,700 account breaches, respectively.

The reduction of data breaches in India went in parallel with a global trend of reduced breaches. According to the report, there were 68 per cent fewer breached users in 2022 compared to the previous year.

Europe performed the worst

The report concludes that about 153.3 million, or half of all the breaches recorded during 2022, happened to European email accounts. This can largely be attributed to a flood of Russian data breaches. Russia witnessed a 191 per cent increase in cyber breaches compared to the previous year.

Meanwhile, Asia accounted for a quarter of all the world’s breaches with 74.2 million instances. Most of these came from China, Indonesia and India. The IndiHome breach was the biggest that happened in the region, with over 74.2 million accounts breached. Apart from Russia, the sharpest spikes in breached accounts happened in Indonesia (269 per cent) followed by Sri Lanka (204 per cent), Uzbekistan (73 per cent), and China (45 per cent).

Hackers breached Russia

According to the report, the United States was the most breached country of this decade up until Russia’s invasion of Ukraine. Since then, the Russian Federation has topped the charts, with one-third of all accounts leaked being from the country. The country witnessed 718 account breaches per 1,000 people, the highest such figure among all countries. To put that into context, Ukraine had 54 victims per 1,000 people last year, a 30 per cent decrease over the previous year.

The post India 7th most cyber-breached country in the world: Surfshark appeared first on IMR.

India was the most targeted country in 2022 as attacks on government agencies more than doubled. CloudSek attributed this to an increase in activities of Malaysia-based hacktivist group Dragon Force, which ran campaigns such as #OpIndia and #OpsPatuk against India in retaliation to the controversial comments by an Indian politician on Prophet Mohammed.

Another hacker group Khalifah Cyber Crew intensified attacks on India in protest against alleged “Muslim discrimination” by the government, the report said.

Hacktivism is a form of cyberattack where the hacker’s motivation is not financial gains but to promote a political agenda or protest against certain policies. Last year, attacks on China also increased due to its aggressive stance towards Taiwan and the Uyghur community.

Attacks on government agencies in China declined to 4.5% of all attacks from 13.10% last year. On the other hand, in India, US, and Indonesia, the share of all attacks grew from 6.3% to 13.7%, 7.4% to 9.6%, and 4.6% to 9.3%, respectively,

In 2022, hacktivism accounted for 9% of the cyberattacks on the government sector.

In addition to hacktivism, government agencies in India are also increasingly being targeted by phishing campaigns, according to the report.

CloudSek also found that ransomware groups were very active and accounted for 6% of the attacks on governments. LockBIT, which provides ransomware-as-a-service (RaaS) was the most prominent ransomware operator. Its targets this year include government agencies in the US, Canada, and Italy. In November, a Russian national was arrested in Canada for alleged involvement in LockBIT ransomware campaigns in the US.

Last month, India’s top government-run hospital All India Institute of Medical Science (AIIMS) was also hit by a cyberattack causing disruption of online services that lasted over two weeks.

India’s nodal cybersecurity agency Computer Emergency Response Team (CERT-In) found in its investigation that five AIIMS’ servers were compromised during the attack and nearly 1.3 terabytes of data was encrypted by hackers.

“The ratio of government-sponsored attacks has also multiplied; however, there is no exact figure for this increase since these attacks are mostly untraceable. This growth can be primarily attributed to the advent of RaaS models,” CloudSek said.

Attacks on Russia increased 600% in 2022 in retaliation to its invasion of Ukraine, making it the fifth most targeted country.

Cyberattacks on government agencies are not new. Many of these attacks state sponsored and are aimed at stealing sensitive information or cripple critical infrastructure of other countries. Indian entities are often targeted by hacker groups with links to China. Similarly, many of the attacks on US agencies often originate from Russia or North Korea.

According to IBM’s ‘Cost of Data Breach Report 2022’, the average cost of data breaches in the government sector has increased from $1.93 million in 2021 to $2.07 million this year.

Experts believe that state-sponsored hackers will go after cloud services next year due to growing digital transformation. “Nation states will begin to target cloud service provider (CSP) managed services as companies migrate more of their attack surface to these managed services,” said Bob Huber, chief security officer at Tenable, a cybersecurity firm.

The post India saw the highest number of cyberattacks on govt agencies in 2022 appeared first on IMR.

Industry data shows that 2022 has been the worst year so far for India when it comes to cyberattacks — a problem that has only grown with increasing digitalisation. The question now is, what next? 

According to a study released Tuesday by Indusface, a Tata Capital-funded software-as-a-service (SaaS) security firm, India has become one of the most attacked and breached countries in the world. Among the 829 million cyber-attacks detected and blocked globally by the firm in the fourth quarter of 2022, close to 59 per cent were directed towards India. 

“Ransomware attacks in India have increased significantly and one of the most distinguishing aspects in 2022 was the involvement of state actors,” Sameer Patil, senior fellow at Observer Research Foundation (ORF), a multi-disciplinary think-tank, told ThePrint.

“So, it is not just profit motivation. We saw how police personnel had come out with Chinese links [in AIIMS cyberattack], of how they had a role to play,” he added. 

Government data, collated by the Ministry of Electronics and Information Technology’s Indian Computer Emergency Response Team (CERT-In), is available only till 2021, but that too shows an increase in cyberattacks in India.

In 2019, CERT-In handled close to 3,94,499 incidents in total, in which it suggested remedial measures for organisations and shared notes on “cyber threats and vulnerabilities”. In the same year, CERT-In issued 204 security alerts and 38 advisories.

The number of incidents handled by CERT-In surged in 2020 to 11,58,208, a near-tripling over the previous year. This surge continued in 2021, which saw 14,02,809 incidents, a 21 per cent increase. 

The matters CERT-In looks into include website intrusion and malware propagation, malicious code, phishing, distributed denial-of-service (DDoS) attacks, website defacements, unauthorised network scanning or probing activities, ransomware attacks, data breaches and vulnerable services.

In this backdrop, what will the government and companies do differently in the coming year?

As the government readies its legislation on cybersecurity, numerous industry-wide surveys and sector experts say that 2023 will see companies spending significant amounts to secure their digital systems from attacks.

CERT-In has also laid out a standard operating procedure for data breaches wherein companies and other organisations are supposed to inform the government of any breach within six hours, although this move has received a mixed reaction since compliance may be challenging.

What will companies do differently?

A significant increase in cybersecurity budgets, the advent of a slew of cybersecurity guidelines for companies, and awareness programmes for the public by law enforcement agencies are some of the preventive methods that will be seen more in 2023.

According to Sajan Paul, managing director & country manager, India & SAARC, Juniper Networks, there will be a significant increase in cybersecurity budgets in 2023 within organisations, and a more preventive approach will be embraced.

“With the ongoing threat of cyberattacks, data security remains a major priority,” he said, citing figures from PwC’s annual Global Digital Trust Insights survey. “Over 82 per cent of business executives in India foresee an increase in their cybersecurity budget in 2023. The survey also reported that 65 per cent of business executives believe cyber criminals will significantly affect their organisation in 2023, more than in 2022,” he explained.

He added that a “zero trust” policy will be an “essential security strategy” for India, going forward. 

“‘Zero trust’ is the essential security strategy in today’s hybrid work environment. Instead of assuming that everything behind the corporate firewall is safe, the ‘zero trust’ model assumes breach and verifies each request as though it originates from an open network,” Paul explained.

“Regardless of where the request originates from or what resource it accesses, ‘zero trust’ teaches us to ‘never trust, always verify’. The zero trust network reduces the complexity of securing your assets and makes it much easier to isolate problems,” he added. 

Even at an individual level, experts have pointed out, there must be an increase in cyber hygiene so that people don’t inadvertently enable breaches to take place.

According to ORF’s Patil, lack of awareness about cyber-hygiene in the general populace, remains a challenge. “People don’t know what to click on and what not to in the digital space, and inadvertently become enablers [of breaches],” he said. 

“Online tools like deepfake have proven themselves useful for recreating videos and content that may spread incorrect information to the public. These may have huge national security implications if not identified immediately,” he added.

Data protection Bill and CERT-In rules

India’s IT ministry has come up with the Digital Personal Data Protection Bill, 2022, defining some roles of data fiduciaries and introducing appellate committees that will deal with redressals and grievances. Many have termed it a “step in the right direction” to ensure data security.

The draft law, alongside CERT-In rules, has been part of core policy discussions in India. As mentioned earlier, the rules now require companies to report cybersecurity incidents within six hours. While this seems stringent, it might not be practical, some experts believe. 

According to Akash Karmakar, partner with the Law Offices of Panag & Babu, and who leads its fintech and regulatory advisory practice, the CERT-In rules  should have been subject to change as companies may not have the financial bandwidth to recognise breaches.

“The CERT-In directions mandating reporting of cyber security incidents [within six hours] was perhaps the most significant development in the cybersecurity domain this year. I’m surprised this has not been challenged since it is onerous to comply with and operationally very difficult to implement. The tightest global equivalent for reporting cybersecurity incidents is 72 hours,” Karmakar told ThePrint.

He also highlighted how the way forward could be the prescription of a “cybersecurity insurance”. This, according to him, could “go a long way”.

“The other challenge is how monetary loss owing to a cybersecurity incident is remediated. Mandating cybersecurity insurance for certain key risks, akin to a mandated motor vehicle or travel insurance, would go a long way to ensure that impacted entities are in a position to pay out compensation for personal data that is lost,” he said.

The post 2022 was India’s worst year of cyberattacks appeared first on IMR.

Artificial Intelligence (AI) and Machine Learning (ML): AI and ML are expected to be increasingly used to improve decision-making, target identification, and battlefield awareness. They could also be used to develop autonomous weapons, which could make warfare more efficient and less reliant on human decision-making.

Autonomous Systems: Unmanned aerial and ground vehicles, as well as underwater drones, are expected to become more prevalent on the battlefield. These systems could be used for reconnaissance, surveillance, and other military tasks, and could greatly enhance the capabilities of military forces.

Directed Energy Weapons (DEW): Lasers and microwave weapons are expected to become more powerful and more widely used in warfare. These weapons could be used to disable or destroy targets at a distance, and could greatly enhance the capabilities of military forces.

Quantum Technology: Quantum computing, quantum communication and quantum encryption are expected to play a major role in future warfare. They could be used to develop more powerful and secure communication systems, as well as to improve intelligence gathering and analysis.

Cybersecurity: As more military systems become connected to the internet, protecting them from cyberattacks will become increasingly important. Emerging technologies such as blockchain and quantum-resistant cryptography are expected to play a key role in securing military networks and systems.

Robotics and Drones: Robotics and drones are expected to play a more prominent role in future warfare, they could be used for reconnaissance, surveillance, and other military tasks including search and rescue, reconnaissance, and explosive ordnance disposal.

Augmented and Virtual Reality (AR/VR): AR/VR are likely to be used for training, simulation, and for enhancing the situational awareness of soldiers on the battlefield.

Hypersonic Weapons: These are missiles that travel at speeds above Mach 5 and can evade traditional missile defense systems.

Space-based Assets: Satellites are being used for a variety of military purposes, including communication, navigation, and intelligence gathering.

Autonomous Systems

India has been actively working on developing autonomous systems and Robotics for defence purposes.

Unmanned Aerial Systems (UAS). The Defence Research and Development Organisation (DRDO) has been developing various UAS for reconnaissance, surveillance, and target acquisition. DRDO’s unmanned aerial vehicle (UAV) Rustom-2 can be used for intelligence, surveillance, and reconnaissance (ISR) missions.

Unmanned Ground Vehicles (UGVs). DRDO has been developing UGVs for a variety of tasks, including explosive ordnance disposal and reconnaissance. DRDO’s UGV named Daksh is capable of handling Improvised Explosive Devices (IEDs). A Minefield Breaching System (MBS) has also been developed, which can be used to clear minefields and other explosive hazards.

Autonomous Naval Systems. Autonomous surface and underwater vehicles for naval applications such as mine countermeasures, anti-submarine warfare, and surveillance are under development. Indian Navy has developed an Autonomous Underwater Vehicle named AUV-62.

Autonomous Weapon Systems. DRDO has been working on autonomous weapon systems for use in air, land and naval defence. These systems are intended to improve decision-making and target identification.

Humanoid Robots. DRDO is also researching the development of humanoid robots for military and civilian applications.

Artificial Intelligence and Machine Learning

AI and ML technologies are being used to improve decision-making, target identification and tracking, predictive maintenance and cybersecurity.

AI-based Decision Support Systems. The Indian armed forces are using AI-based decision support systems to improve situational awareness and decision-making on the battlefield. The Indian Army has developed an AI-based decision support system called the Tactical Control and Analysis System (TCAS).

ML-based Target Identification and Tracking. DRDO has been working on developing ML-based systems for target identification and tracking, for use in air and missile defence. DRDO has developed an ML-based system for tracking and identifying aircraft and missiles, called the Integrated Air Command and Control System (IACCS).

AI-based Predictive Maintenance. India’s armed forces are using AI-based predictive maintenance systems to improve the maintenance of weapons and equipment. The Indian Navy has developed an AI-based predictive maintenance system called the Automatic Maintenance Management System (AMMS).

AI-based Cyber Security. AI and ML has been in use to improve cybersecurity, including intrusion detection and response, and threat intelligence.

AI-based Autonomous Systems. DRDO is been researching the use of AI to improve the autonomy and decision-making capabilities of unmanned systems, including UAVs and UGVs.

Hypersonic Weapons

India is actively researching and developing hypersonic weapons technology, including the Hypersonic Technology Demonstration Vehicle (HSTDV), the BrahMos-II missile, and the Hypersonic Air-breathing Weapon Concept (HAWC). India has also successfully tested a hypersonic scramjet engine, which is a key technology for hypersonic propulsion.

HSTDV can be used to test and validate hypersonic propulsion technologies. BrahMos-II is an upgraded version of BrahMos supersonic cruise missile, designed to be able to travel at hypersonic speeds. HAWC will be a new class of missile that can travel at hypersonic speeds and carry conventional or nuclear payloads.

India has successfully tested a hypersonic scramjet engine. This technology will be used to power the HSTDV and the HAWC.

Directed Energy Weapons

India is actively researching and developing directed energy weapons (DEW), such as high-energy laser systems and microwave weapons, for use in air and missile defense, electronic warfare, and communications.

High-energy Laser Systems. DRDO has been researching and developing high-energy laser systems to disable or destroy incoming missiles and aircraft. DRDO is also working on microwave weapons for use in electronic warfare. These weapons can be used to disrupt or damage electronic systems, such as radar and communications systems.

Laser-based Communication System. The Department of Space has been developing a laser-based communication system that uses a beam of laser light to transmit data through the atmosphere.

Solid-state Laser Technology. DRDO is also working on solid-state laser technology for use in high-energy laser systems.

Space-based Assets

India has been developing a variety of space-based assets for military use, including communication, navigation and reconnaissance satellites, military satellite launch vehicles and space-based early warning systems.

Communication Satellites. Indian Space Research Organisation (ISRO) has developed a number of communication satellites that can be used for military and civilian purposes.

Navigation Satellites. ISRO has developed a regional satellite navigation system called NAVIC (Navigation with Indian Constellation) which provides accurate positioning and timing information for military and civilian use.

Reconnaissance Satellites. ISRO has developed a number of reconnaissance satellites that can be used for intelligence gathering, surveillance and reconnaissance. These include the Cartosat series of satellites which provide high-resolution imagery.

Military Satellite Launch Vehicles. The Polar Satellite Launch Vehicle (PSLV) and the Geosynchronous Satellite Launch Vehicle (GSLV) are used to launch military and civilian satellites into orbit.

Space-based Early Warning Systems. Space-based early warning systems is being developed to detect and track incoming ballistic missiles, and other potential threats to Indian airspace.

Quantum Communication and Quantum Computing

In summary, India is actively researching and developing Quantum communication and Quantum computing technology for defence applications, with a focus on Quantum key distribution, quantum computing, quantum random number generator, and quantum communication network. DRDO and Indian Institute of Technology (IIT), Indian Institute of Science (IISc) have been leading the development of these technologies.

QKD uses the principles of quantum mechanics to generate and distribute cryptographic keys, making it extremely difficult to hack.

DRDO has been researching the use of quantum computing for cryptography, simulation and optimization. A quantum random number generator has been developed that can be used for cryptographic applications, such as key generation and encryption. Indian Institute of Technology (IIT) and Indian Institute of Science (IISc) are also actively researching and developing quantum computing technology.

Quantum Communication Network. DRDO is also researching the development of a quantum communication network that would be able to transmit information securely using quantum cryptography.

Critical Technologies for Next-gen Fighter Aircraft

Several critical technologies are required for military aerospace and next-gen fighter aircraft. These include:

• Stealth technology by reducing the radar cross-section of an aircraft to make it more difficult to detect by radar. This can be achieved through the use of advanced materials and shaping techniques.

• Avionics systems that can integrate and process a large amount of data from various sensors, including radar, infrared, and electronic warfare systems, to improve situational awareness and decision-making.

• Supersonic and hypersonic propulsion that enable aircraft to fly at supersonic or hypersonic speeds, greatly increasing their speed and range, as well as their ability to evade enemy defences.

• Directed energy weapons like laser and microwave weapons that can be used to disable or destroy enemy aircraft, missiles and other targets.

• The use of advanced materials, such as composites, that can withstand high temperatures and stresses, as well as structures that can withstand high-g manoeuvres are critical for next-generation fighter aircraft.

Complexities Involved in Development of Aeroengines

The development and manufacture of aeroengines is a complex and challenging process that involves a number of technical, logistical, and financial complexities. Some of the major complexities involved in this process include:

Advanced Materials and Manufacturing Techniques. Aeroengines are made from a variety of materials, including metals, ceramics, and composites, which must be engineered and manufactured to exacting tolerances to withstand the high temperatures, pressures, and loads encountered in flight.

Complex Design and Engineering. Aeroengines are highly complex systems that require advanced design and engineering techniques to optimize performance, efficiency, and reliability. This includes the use of computational fluid dynamics, finite element analysis, and other advanced simulation tools to model and optimize the engine’s performance.

High Development and Manufacturing Costs. Developing and manufacturing aeroengines is an extremely costly process, involving significant investments in research and development, engineering, testing, and production facilities.

Critical Technologies for Next-gen Armoured Fighting Vehicles

Some critical technologies for next generation armoured fighting vehicles include:

• Active protection systems (APS) which detect and intercept incoming projectiles before they can hit the vehicle.

• Advanced armour materials, such as ceramic and composite materials, that can provide better protection against high-powered weapons.

• Electric drive systems and hybrid powertrains to improve mobility and reduce dependence on fossil fuels.

• Advanced sensors and networking systems to improve situational awareness and communication among vehicles and with command and control centres.

• Autonomous capabilities such as autonomy and artificial intelligence to improve decision-making and reduce the risk to crew members.

• Stealth technology to reduce the vehicle’s detectability by enemy sensors.

• Laser weapons, directed energy weapons, to provide longer range and more precise firepower.

Critical Technologies for Next-gen Submarines

Next-gen submarines require some critical technologies as follows:

• Advanced stealth technology to reduce the submarine’s detectability by enemy sensors. This includes quieting systems for the propulsion, electrical and mechanical systems, as well as hull coatings and designs that minimize the submarine’s acoustic, magnetic and electromagnetic signatures.

• AIP (air-independent propulsion) systems that allow the submarine to operate for extended periods without surfacing. This can include fuel cells, closed-cycle diesel engines, or Stirling engines.

• Advanced sensors, including sonar systems, for improved underwater detection and classification of other vessels and submarines.

• Integrated communications and networking systems to improve the submarine’s command, control, and information-sharing capabilities.

• Hybrid electric drive propulsion system that allows extended low-speed operations and silent running, as well as increased range and endurance.

• In the case of next-gen frigates and destroyers, additional technologies, as follows, are required:

• Advanced propulsion systems, such as gas turbine or integrated electric drive, to improve the ship’s speed, range, and manoeuvrability.

•  Advanced sensors, including radar, sonar and electronic warfare systems, for improved situational awareness and threat detection.

• Integrated communications and networking systems to improve the ship’s command, control, and information-sharing capabilities.

• Advanced armour materials and active protection systems to improve the ship’s survivability against incoming projectiles.

Way Ahead

India is a significant player in the defence and aerospace industries, with a strong focus on developing advanced technologies. The country has a robust domestic defence industry, which produces a wide range of military equipment and weapons systems, including tanks, fighter jets, and warships. India also has a growing aerospace industry, with several major companies and research institutions including DRDO working on developing new technologies in areas such as satellite launch vehicles, unmanned aerial vehicles (UAVs), and hypersonic vehicles. Additionally, India has a strong tradition of scientific research, including in areas such as aerodynamics, propulsion, and materials science, which it is leveraging to develop advanced technologies for defence and aerospace applications.

To further enhance its capabilities and catch up with the world leaders in advanced technologies, India should increase investment in research and development; encourage collaboration and partnerships between its defence and aerospace companies, research institutions, and international partners; create a conducive policy environment (funding, tax incentives, and other benefits); increase indigenization with a focus on building capabilities in design, development, and production of defence equipment; and emphasize on education and training (science, technology, engineering, and mathematics).

The post Cutting Edge Technologies for the Future Battlefield appeared first on IMR.

A Chinese hacking group called RedEcho is believed to have attacked Maharashtra’s electricity grid in March 2021, amidst an ongoing crisis in Ladakh. Hackears from North Korea penetrated the Kundankulam Nuclear Power Plant (KKNPP) in 2019 in a bid to test the cyber security of the plant and steal information about the reactor design.

Infrastructure Projects at Risk

India’s infrastructure projects, particularly those related to the country’s strategic interests, are considered to be at risk from cyberattacks by Chinese state-sponsored groups. These groups are known to have a significant capability in cyber espionage and have been accused of targeting infrastructure projects in other countries as well. In recent years, there have been a number of reported cyberattacks on Indian infrastructure projects, including attacks on power grids and transportation systems. The Indian government has acknowledged the risk and has taken steps to increase cybersecurity measures to protect its infrastructure projects, but it is a constant battle to stay ahead of the attackers.

PLA’s Cyber Attackers

In some ways, cyber war between India and China is already taking place – after India banned hundreds of Chinese mobile apps, limiting Chinese investments in the Indian economy and giving a bloody nose to the People’s Liberation Army on the Line of Actual Control on 15 June 2020.

In March 2013, DRDO’s computers were breached by Chinese hackers, who took files related to Cabinet Committee on Security (CCS), to a server in Guangdong in China and the Indian defence ministry ordered a probe.

China-linked hacker group, RedFoxtrot, from their intelligence Unit 69010, targeted India’s power sector, including conglomerate NTPC, in March 2021. RedFoxtrot’s predominant targets are sectors like government, defence, and telecommunications across Central Asia, India, and Pakistan.

Some Indian targets included Walchandnagar Industries engaged in India’s Nuclear and Space programmes, and defence manufacturer Alpha Design Technologies and Bharat Sanchar Nigam Limited (BSNL).

The Times Group (Feb, Aug 2021), Unique Identification Authority of India (UIDAI), and MP Police Department (June 2021) have been targeted by suspected Chinese state-sponsored threat activity group TAG-28, which used Winnti malware. In June 2021, APT41 was responsible for cyber attack against Air India.

Recent Initiatives

The creation of the Defence Cyber Agency in 2019, Cyber Security Coord at the National Security Council (NSC), preparedness for offensive ops by the National Technical Research Organisation (NTRO), defensive measures by National Critical Info Infrastructure Protection Centre (NCIIPC) and the release of India’s National Cyber Security Policy (NCSP) are steps in the right direction. As roles and responsibilities of the armed forces, other government agencies as well as the private sector are articulated, the nation’s vulnerability to cyber attacks will decrease.

The vulnerabilities facing India’s Critical Infrastructure (CI) need to be addressed with greater urgency. Cyber attacks against India’s CI and Strategic Infrastructure (ST), such as nuclear power plants, are not new.

Defensive measures like having a cyber security framework, Cyber Security Awareness, Incident Response Tools, Vulnerability Assessment and Penetration Testing, Multi-Factor Authentication and so on are necessary but offensive defence is the key. Along with space, Indian must prepare for “cross-domain” warfare to include cyberspace.

Comments

China has been leading a worldwide hacking and economic espionage campaign, using cyber attacks to steal intellectual property in disregard of bilateral and multilateral agreements.

China is one of the world’s pre-eminent players using cyber weapons. Used as methods of espionage, state-sponsored data breaches and server hacks pose a significant threat to global security. China was responsible for worldwide rise of cyber crime by 600% during the Covid-19 pandemic. Even before the virus hit, China had overtaken Russia as the biggest state sponsor of cyber attacks against the West.

The People’s Liberation Army (PLA) of China is known to have trained hackers and offensive cyber groups for operations. These groups are believed to have been involved in a number of cyber espionage and cyber-attacks against various countries, including the United States and India. The PLA’s cyber units are thought to be well-funded and well-equipped, with a focus on both defensive and offensive capabilities. In addition to targeting government and military organizations, these groups have also been known to target private companies, particularly those in the technology and aerospace sectors. The Chinese government has denied any involvement in cyber-attacks, but evidence suggests otherwise. The US and other countries have accused China of using cyber espionage to gain an economic and strategic advantage.

The post India’s Vulnerability to Chinese Cyber Attacks appeared first on IMR.

CERT-In is learnt to be working on releasing more details of the cybersecurity directive issued in April, which has been opposed by industry stakeholders. According to sources, the agency could clarify that the norms apply only to VPN providers who offer “Internet proxy like services” to “general Internet subscribers”, and not to corporate VPN service providers.

What are these norms that CERT-In is clarifying?

The norms, released on April 28, asked VPN service providers along with data centres and cloud service providers, to store information such as names, email IDs, contact numbers, and IP addresses (among other things) of their customers for a period of five years. Entities are also required to report cybersecurity incidents to CERT-In within six hours of becoming or being made aware of them.

The norms have triggered concerns over privacy, and CERT-In is expected to clarify that private information of individuals will not be affected by the directions.

“These directions do not envisage seeking of information by CERT-In from service providers on a continual basis as a standing arrangement. CERT-In may seek information from service providers in case of cyber security incidents and cyber incidents, on a case-to-case basis, for discharge of its statutory obligations to enhance cyber security in the country,” according to a person aware of the clarifications that CERT-In is in the process of finalising.

The agency is also likely to include in its clarifications that the April 28 directive to store such information and share it with CERT-In will “override” any contractual obligation VPN providers may have with their customers of not disclosing such information.

Queries sent to the IT Ministry and CERT-In Director General Sanjay Bahl were not immediately answered.

But why has CERT-In felt the need to issue a clarification?

Prominent VPN providers, a large part of whose value proposition is ensuring anonymity of their users on the Internet, have questioned the directives, and some providers like NordVPN are even considering pulling their servers from India should the directive be enforced on them.

“At the moment, our team is investigating the new directive recently passed by the Indian government and exploring the best course of action. As there are still at least two months left until the law comes into effect, we are currently operating as usual. We are committed to protecting the privacy of our customers, therefore, we may remove our servers from India if no other options are left,” Laura Tyrylyte, head of public relations at Nord Security, said.

VPN providers like Surfshark have claimed that their technology does not allow the logging of users’ information. “Surfshark has a strict no-logs policy, which means that we don’t collect or share our customer browsing data or any usage information,” Gytis Malinauskas, head of the legal department at Surfshark, said.

“Moreover, we operate only with RAM-only servers, which automatically overwrite user-related data. Thus at this moment, we would not be able to comply with the logging requirements even technically. We are still investigating the new regulations and its implications for us, but the overall aim is to continue providing no-logs services to all of our users,” Malinauskas said.

How has the government responded to these concerns?

Speaking to The Indian Express earlier this month, IT Minister Ashwini Vaishnaw had said there was “nothing to worry about” CERT-In’s norms. “There is no privacy concern. Suppose somebody takes a mask and shoots, wouldn’t you ask them to remove that mask? It is like that,” Vaishnaw had said during an interview.

Explaining the need for the rules, he had said, “Cybersecurity is something which is continuously evolving. So we have issued very comprehensive guidelines from CERT-In. Ultimately, if there is a threat to you, the police and you would both have to work together.”

“The basic concept (of the guidelines) is that the people who are actually running the infrastructure should take all possible steps to make sure that things are in place and if there is any breach, immediately inform us so that we can take action,” Vaishnaw said.

The post New cybersecurity norms announced by CERT-In appeared first on IMR.

According to the report by cybersecurity company Trellix, over half of adversarial advanced persistent threat actor activity originated from Russian and Chinese backed groups and Russian-backed groups like APT29 have continued to greatly increase their activity in 2022.

Reports surfaced last week that a Russian malware planted from a server in Nigeria was used for a cyber attack on Oil India’s (OIL) system in Assam.

The state-owned company had suffered a major cyber-attack in its field headquarters in eastern Assam’s Duliajan, with the hacker demanding $75,00,000.

The report found a significant 73 per cent increase in cyber incidents targeting individuals and positioned people as the top attack sector in Q4 2021.

Individual consumers are the top target of cybercriminals, closely followed by the healthcare vertical.

Additionally, the transportation, shipping, manufacturing and information technology industries showed a sharp increase in threats.

“We are at a critical juncture in cybersecurity and observing increasingly hostile behaviour across an ever-expanding attack surface,” said Christiaan Beek, lead scientist and principal engineer, Trellix Threat Labs.

The fourth quarter signalled the shift out of a two-year pandemic which cybercriminals used for profit and “saw the Log4Shell vulnerability impact hundreds of millions of devices, only to continue cyber momentum in the new year where we’ve seen an escalation of international cyber activity,” he added.

Transportation and shipping were the target of 27 per cent of all advanced persistent threat (APT) — activity by adversarial and stealthy actors — detections.

Healthcare was the second most targeted sector, bearing 12 per cent of total detections.

From Q3 to Q4 2021, threats to manufacturing increased 100 per cent, and threats to information technology increased 36 per cent, said the report.

APT29, believed to conduct operations for Russian government entities, ranked most active among nation-state groups.

Malware was the technique used most often, accounting for 46 per cent of total cyber incidents.

The post India sees 70 per cent spike in ransomware attacks on critical infrastructure appeared first on IMR.

The Ministers reviewed mutual efforts to respond to the worsening humanitarian crisis in Ukraine and assessed its broader implications. They urged an immediate cessation of hostilities. The Ministers unequivocally condemned civilian deaths. They underscored that the contemporary global order has been built on the UN Charter, respect for international law, and the sovereignty and territorial integrity of all states.

On Quad

Recalling the inaugural virtual Quad Leaders’ Summit in March 2021, the in-person Quad Leaders’ Summit in September 2021 in Washington, the February 2022 Quad Foreign Ministers’ meeting in Melbourne, and looking forward to the next Quad Leaders’ Summit in Tokyo in 2022, the Ministers reaffirmed their commitment to a free and open Indo-Pacific in which the sovereignty and territorial integrity of all states are respected, and countries are free from military, economic, and political coercion.

They further reaffirmed their dedication to promoting regional stability and prosperity, with an inclusive regional architecture, abiding by the rule of law, the freedom of navigation and overflight, peaceful resolution of disputes, and ASEAN centrality. They also reiterated the importance of adherence to international law to meet challenges to the rules-based order, including in the South China Sea.

Science, Technology, Cybersecurity, and Space

Reflecting on the positive science and technology cooperation between the two countries, the Ministers welcomed the announcement of a Joint Commission Meeting on Science and Technology in 2022, to discuss future science and technology collaboration.

The Ministers applauded the recent and upcoming meetings of the India-U.S. Cyber Dialogue and the Information and Communication Technology (ICT) Working Group to deepen cybersecurity cooperation. They strongly condemned ransomware and other cyber-related crimes and recognized the need to bolster protection of critical networks and infrastructure.

Recalling their countries’ strong tradition of space exploration and endeavors, the Ministers announced the conclusion of a Memorandum of Understanding on Space Situational Awareness and pledged to expand bilateral space cooperation, acknowledging the pivotal role international cooperation plays in the long-term sustainability and safety of the outer-space environment. They applauded the ongoing development of the NASA-ISRO Synthetic Aperture Radar (NISAR) satellite, planned for launch from India in 2023. The NISAR mission will collect data vital to tackling the climate crisis. The Ministers also looked forward to the convening of the next India-U.S. Civil Space Joint Working Group in 2022.

On UNSC Permanent Membership

The United States congratulated India for its significant contributions as a member of the United Nations Security Council (UNSC) for the term 2021-2022. In this context, the United States expressed its appreciation for India’s leadership as the Chair of the three Committees of the Security Council: the 1988 Taliban Sanctions Committee, the 1970 Libya Sanctions Committee and the 1373 Counter Terrorism Committee.

The Ministers reiterated their commitment to work together in close coordination at the UNSC and in international organizations. The United States reaffirmed its continued support for India’s permanent membership in a reformed UNSC and for India’s entry to the Nuclear Suppliers’ Group.

On Afghanistan

The Ministers called on the Taliban to abide by UNSC Resolution 2593 (2021), which demands that Afghan territory must never again be used to threaten or attack any country or to shelter or train terrorists, or to plan or finance terrorist attacks. The Ministers urged the Taliban to adhere to these and all other commitments; respect the human rights of all Afghans, including women, children, and members of minority groups; and uphold freedom of travel. They also emphasized the importance of an inclusive Afghan government and unhindered access for the United Nations and its implementing partners to deliver humanitarian assistance. The Ministers recommitted to close consultations on Afghanistan to help facilitate an inclusive and peaceful future for all Afghans.

Counterterrorism

The Ministers welcomed the convening of the 18th Meeting of the India-U.S. Joint Working Group on Counter Terrorism and the 4th Session of the India-U.S. Designations Dialogue in October 2021. The Ministers strongly condemned any use of terrorist proxies and cross-border terrorism in all its forms and called for the perpetrators of the 26/11 Mumbai attack, and Pathankot attack, to be brought to justice. They called for concerted action against all terrorist groups, including groups proscribed by the UNSC 1267 Sanctions Committee, such as al-Qa’ida, ISIS/Daesh, Lashkar-e-Tayyiba (LeT), and Jaish-e-Mohammad (JeM), and Hizb ul Mujahideen. The Ministers called on Pakistan to take immediate, sustained, and irreversible action to ensure that no territory under its control is used for terrorist attacks. The Ministers committed to continued exchange of information about sanctions and designations against terror groups and individuals, countering violent radicalism, use of the Internet for terrorist purposes, and cross-border movement of terrorists. The Ministers also emphasized the importance of upholding international standards on anti-money laundering and combating the financing of terrorism by all countries, consistent with FATF recommendations.

The Ministers also reaffirmed their support for the early adoption of a UN Comprehensive Convention on International Terrorism (CCIT) that advances and strengthens the framework for global cooperation and reinforces that no cause or grievance justifies terrorism.

The post Extracts From the India – US 2+2 Dialogue Joint Statement appeared first on IMR.