Why in news?

According to the 2023-24 annual report of the Department of Personnel Training (DoPT), a crucial defence unit was affected by a ransomware attack in 2023. The CBI investigated multiple cybercrimes with national security implications, including ransomware, a massive DDOS attack on critical infrastructure, and a malware breach within a Ministry.

What’s in today’s article?

• Cyber Attacks
• Key Highlights from the 2023-24 DoPT Report

Cyber Attacks

• About
  • A cyber attack is a malicious attempt by individuals or groups to disrupt, damage, or gain unauthorized access to computer systems, networks, or data.
  • These attacks can result in data breaches, financial losses, and compromised security, affecting individuals, organizations, and even national infrastructures.
• Types of Cyber Attacks
  • Phishing
    • In phishing attacks, attackers deceive users into providing sensitive information like login credentials or financial details through fake emails or websites.
    • For example, in a 2020 attack, hackers used phishing emails to impersonate World Health Organization officials, exploiting COVID-19 fears.
  • Ransomware
    • Ransomware is a type of malware that locks or encrypts data, demanding ransom for access restoration.
    • E.g., the WannaCry ransomware attack of 2017 affected organizations worldwide, including the UK’s National Health Service, halting critical healthcare services.
  • Distributed Denial-of-Service (DDoS)
    • In DDoS attacks, attackers flood a server with excessive traffic, overwhelming it and making services unavailable.
    • A DDOS attack disrupted the planned live interview between Elon Musk and Donald Trump on X during the US Presidential election 2024.
  • Malware
    • Malware includes viruses, worms, and spyware that can disrupt systems, steal data, or damage files.
    • For instance, the 2010 Stuxnet worm targeted Iran's nuclear facilities, sabotaging centrifuges and slowing nuclear development.
• Challenges
  • Evolving Attack Methods
    • Attackers continually innovate, making it difficult for defenses to keep pace.
    • Ransomware has evolved to double extortion, where attackers also threaten to release sensitive data if the ransom is unpaid.
  • Lack of Skilled Cybersecurity Professionals
    • The demand for skilled cybersecurity experts often outpaces supply, leaving gaps in defense for many organizations.
  • Cross-Border Complexity
    • Many cyber attacks originate outside national borders, complicating law enforcement efforts and international collaboration.
  • Rising Costs and Impact on Critical Infrastructure
    • Cyber attacks can impose heavy financial costs on affected entities and disrupt essential services.
    • For example, a 2023 ransomware attack on a critical Indian defense unit underscored the risks to national security posed by such incidents.

Key Highlights from the 2023-24 DoPT Report

• Ransomware Attack on Defence Unit and Surge in Cyber Crimes
  • A crucial defence unit was affected by a ransomware attack in 2023.
  • The CBI investigated multiple cybercrimes with national security implications, including ransomware, a massive DDOS attack on critical infrastructure, and a malware breach within a Ministry.
• Data Breach and Rising Cybersecurity Threats
  • In October 2023, Resecurity reported a major data leak at the Indian Council of Medical Research (ICMR), exposing Aadhaar and passport information of 81 crore Indians.
  • CERT-In documented 15,92,917 cybersecurity incidents in 2023, including website intrusions, phishing, and data breaches—a significant rise from 53,117 incidents in 2017.
  • Remedial measures were implemented in collaboration with stakeholders.
• Cross-Border Cyber Fraud Investigations and International Collaboration
  • The CBI partnered with international agencies, including the FBI, Royal Canadian Mounted Police, and Singapore police, to dismantle fraud networks operating from India.
  • Notable cases involved cryptocurrency scams, call centre fraud targeting U.S. and Canadian citizens, and crypto fraud linked to Australian tax evasion.
• Cyber Crime Impact on Indian Citizens and Financial Fraud Investigations
  • The CBI tackled cyber fraud impacting Indian citizens, including app-based investment scams originating in neighboring countries.
  • An IMPS fraud case initiated by RBI involved ₹820 crore in reversed transactions across banks.
• Revised Cybersecurity Oversight and Coordination Roles
  • In September 2023, the Cabinet Secretariat revised the Allocation of Business Rules.
  • The National Security Council Secretariat, under NSA Ajit Doval, was assigned to lead cyber security coordination.
  • The Ministry of Electronics and Information Technology was designated to secure telecom networks and the Ministry of Home Affairs to handle cybercrimes.