German cybersecurity office BSI issues dire threat warning
Germany's Federal Office for Information Security (BSI)
released its annual threat report Thursday, sounding the alarm over risks
presented by computer viruses and ransomware attacks.
Speaking in Berlin alongside Federal Interior Minister Horst
Seehofer, BSI President Arne Schönbohm said his agency had detected 144 million
new malware variants between June 2020 to the end of May 2021 — up 22% for the
year.
The Bonn-based BSI, which is part of the Interior Ministry,
said that in February of this year it detected 553,000 malware variants in a
single day — a new record. Its report noted that it had raised the general
threat level posed by malicious computer attacks from "tense" last year
to "tense-to-critical."
At Thursday's presentation, BSI President Schönbohm said
some parts of the digital realm had experienced threat level "red."
The reason, he said, was the increasing professionalism of cybercriminals
combined with the networked composition of society and the ever-expanding
possibilities presented to criminals in terms of software security
vulnerabilities.
The issue of cybersecurity also touches on a key conflict
facing governments and tech companies, namely the argument on one side for
personal data protection and the desire to create software that cannot be
exploited; and on the other, the need to leave some security breaches open in
order for states to catch criminals. Nevertheless, the conundrum is that
criminals are just as keen to exploit security breaches as agencies are.
Coronavirus turbocharging cybercrime
The trend of growing cyber criminality has been turbocharged
by the coronavirus pandemic as more business and government employees work
remotely. The report makes clear that cyberattacks have not only become more
prevalent, they have also become more costly.
Bitkom, an IT-industry association, has estimated that
losses from blackmail and system outages have risen 358% since 2019.
Interior Minister Seehofer said he expected threat levels to
remain high. He said: "The attacks are hitting areas that are fundamental
for our society, like energy and healthcare infrastructure."
The BSI report made clear: "Information security must
be given considerably greater significance and become the basis for all
digitization projects." The agency says it wants to step up its work
advising states, municipalities, businesses and everyday citizens.
Criminals getting more sophisticated
Criminals are not only working for themselves, according to
the BSI, but are also selling their services on the darknet. They have also
become more sophisticated in their approach, using multi-level attack
strategies previously seen in instances of state espionage.
The BSI noted, for instance, a method in which hackers negotiate
ransom from a victim, and in return seek data.
The use of so-called "leak pages" was one such
example, where hackers would publish stolen data to extort victims into paying
a ransom. The agency illustrated the blackmail approach by pointing out the
case of a private psychologist's office that was hacked and in which criminals
proceeded to pressure not only the owner of the practice, but patients as well.
More digitalization, more attacks
The world has seen a number of spectacular cyberattacks this
year, such as the Colonial Pipeline attack that caused gasoline shortages in
the US; the JBS attack, which halted production at the world's largest meat
processor; and the attack on Ireland's Health Service Executive, which forced
the service offline causing confusion and massive delays in services.
In July, the German district of Anhalt-Bitterfeld in eastern
Saxony-Anhalt formally declared a disaster after its computer systems were
compromised. At the time, the BSI called it the country's first "cyber
catastrophe."
Outgoing Interior Minister Horst Seehofer has long argued
that the BSI should not be made independent of the Interior Ministry, which
critics claim has been woefully overwhelmed with the task of fighting
cybercrime for years. Seehofer would not answer reporters' questions about
whether the BSI should become a full-fledged Cabinet ministry under the new
government when asked about the prospect at Thursday's press conference.
Comments
Post a Comment