Hackers take data from the United Nations that might be used in future government cyberattacks.
Hackers gained access to the United Nations’ computer networks, stealing a stockpile of data that may be used to launch future assaults on other governments.
The incident occurred early this year, according to Bloomberg, and was later verified by the United Nations. According to Bloomberg, a hacker gained access to the system by utilizing a stolen login and password, which were presumably acquired on the dark web.
The account was linked to Umoja, the company’s project management software. The hackers were able to proceed deeper into the UN’s system once they obtained access, according to cybersecurity firm Resecurity, which detected the intrusion.
“High-value targets for cyber espionage operations include organizations like the United Nations,” stated Resecurity CEO Gene Yoo. “The actor carried out the breach with the intention of compromising a large number of users on the UN network in order to acquire long-term intelligence.”
It’s just one of a slew of high-profile cybersecurity mishaps that have occurred since the epidemic began. In May, a ransomware assault hit the Colonial Pipeline Company, and later that month, JBS, the world’s largest beef producer, was targeted. As a result of the attacks, both firms were compelled to temporarily halt operations.
The United Nations was notified of the incident, and Resecurity assisted them in determining the extent of the damage. The United Nations first assured the firm that the intrusion was confined to screenshots obtained while the hackers were on the network. The United Nations cut ties with Resecurity when it was revealed that data had been stolen, according to Bloomberg.
“Unknown assailants were able to infiltrate sections of the United Nations infrastructure in April of 2021,” a UN spokesman said in a statement to Newsweek. “Before we were alerted by the firm referenced in the Bloomberg story, this assault had been discovered, and corrective steps to limit the consequences of the breach had already been planned and were being undertaken.” We appreciated the corporation for giving information about the event at the time, and we informed them of the breach.
“Cyberattacks against the United Nations are common, including prolonged operations,” the statement said. “We can also confirm that further attacks connected to the prior breach have been discovered and are being addressed.”
This isn’t the first time the United Nations has been attacked. Forbes reported in 2019 that hackers attacked the company’s “essential infrastructure” in an assault centered on a known weakness in Microsoft’s SharePoint, the company’s online collaboration tool.
According to Newsweek, the cybersecurity sector is experiencing a labor scarcity as businesses attempt to remain one step ahead of multibillion-dollar hacker groups. According to a 2020 study by (ISC)2, a cybersecurity training group, about 359,000 positions remain vacant in the United States alone. Cybersecurity will be a top concern for the US as it seeks to enhance its infrastructure.
“Cybersecurity risks and events affect companies of all kinds, small towns and cities across the country, and the wallets of middle-class people,” according to a statement released by the White House on August 25. “To protect our vital infrastructure, the Biden Administration started a 100-day program this spring to strengthen cybersecurity across the electric industry, with more to come.”