DailyPost 2900
TfL UNDER CYBER ATTACK
A global city’s critical infrastructure being impacted by a cyber-attack is no small news. It does send shivers across the planet for it can happen to any other city. It can happen to any other critical infrastructure in that city or simultaneously across critical infrastructures. It can happen there or any city elsewhere, with much greater intensity when it could bring the city on its knees and the country too. Though for a different reason, we have only recently experienced what can happen if critical information infrastructure is under siege, that was during the global Microsoft Outage.
In this backdrop we are talking about the recent attack on Transport for London, TfL. When it appeared in the media, the cyber-attack was still on. TfL operates most of the transport network, including and tube trains. In an attack last year, TfL was hit by the Russian speaking Clop ransomware gang. In this attack personal details of around 13,000 were stolen. The situation becomes even more worrisome in the wake of a significant cyber-attack on the NHS. It was targeted by Russian hacking group Quiiln through its pathology services provider Synnovis. Both these organizations fall under the same genre of critical infrastructure.
Transport for London has confirmed that it was dealing with an ongoing cyber-attack and has called in the National Crime Agency, NCA, and National Cyber Security Centre for help. The company said that there has been no evidence of any customer data being compromised while they were still dealing with the ongoing cyber security incident. It was stated that transport services were not impacted. But given the evolving situation it cannot be told with finality and a couple of startling facts can tumble out anytime during the course of the investigation. The full extent of the damage remains unknown.
TfL says that security of its systems and customer database is important for them and they have taken immediate action to prevent any further access to their system. Where then has the hack impacted? The breach has impacted the backroom systems at its headquarters. The staff has been asked to work from home as a result of the incident. The attacker was suspected to be in the system and could have continued if not detected so far. It seems to be a part of an ongoing low intensity cyber war. “The big question people will also want to know is who carried out the attack and if it can be attributed to another country.
HACKS REMAIN AN TECHNICAL ENIGMA, WITH THE INVESTIGATION TRAJECTORY BEING LOST IN THE DESERT SANDS.
Sanjay Sahay
Have a nice evening.