Saturday , September 14 2024

Centre issues alert as Indonesian hacker group targets 12,000 Indian websites

A cyber attack group from Indonesia has been allegedly targeting 12,000 government websites in India, according to a cybersecurity alert issued by the Centre.

The alert, accessed by Moneycontrol, was issued by the Ministry of Home Affairs’ Indian Cybercrime Coordination Centre (I4C) on Thursday.

CISA unveils 25 new advisories for Industrial Control Systems

CISA issued 25 ICS advisories on September 12, 2024, detailing current security issues, vulnerabilities, and exploits in Industrial Control Systems....
Read More
CISA unveils 25 new advisories for Industrial Control Systems

Intel Issues Alert on 20+ Vulnerabilities, Urges Firmware Updates

Intel announced over 20 vulnerabilities in its processors and products in security advisories released on Tuesday. The chip giant has...
Read More
Intel Issues Alert on 20+ Vulnerabilities, Urges Firmware Updates

Urgent: GitLab Patches flaws allowing unapproved pipeline Job Execution

GitLab released security updates on Wednesday to fix 17 vulnerabilities, including a critical issue that lets attackers run pipeline jobs...
Read More
Urgent: GitLab Patches flaws allowing unapproved pipeline Job Execution

Fortinet admits data breach after hacker claims to steal 440GB

Fortinet confirmed a data breach after a threat actor claimed to have stolen 440GB of files from its Microsoft SharePoint...
Read More
Fortinet admits data breach after hacker claims to steal 440GB

Gov.t issues high alert on android devices

Indian Computer Emergency Response Team (CERT-In) issued a high-severity alert for android devices on September 11, 2024 highlighting the vulnerabilities...
Read More
Gov.t issues high alert on android devices

TD Bank fined $28 million for sharing customer data

Because of disclosing incorrect and negative data, The Consumer Financial Protection Bureau (CFPB) on Wednesday fined TD Bank, one of...
Read More
TD Bank fined $28 million for sharing customer data

Global-Cybersecurity-Index
Bangladesh secure role-model position by ITU

Bangladesh secure prestigious role-model position in the latest ITU cyber security index published by ITU. Bangladesh ranks among the top...
Read More
Global-Cybersecurity-Index  Bangladesh secure role-model position by ITU

New RansomHub Attack Kill Kaspersky’s TDSSKiller To Disable EDR

Threatdown Managed Detection and Response (MDR) team has discovered the RansomHub ransomware gang using a new attack method wityh two...
Read More
New RansomHub Attack Kill Kaspersky’s TDSSKiller To Disable EDR

Not Enough, Say Experts
India set to train 5000 ‘Cyber Commandos’

India is to make 5,000 cyber commandos over the next five years to deal with cybercrimes in India, said Home...
Read More
Not Enough, Say Experts  India set to train 5000 ‘Cyber Commandos’

Researcher detect 21 New Ransomwares in August

In August, Cybersecurity researchers identified 21 new ransomware variants that threaten indivisual and business. Cybercriminals are improving their tactics, making...
Read More
Researcher detect 21 New Ransomwares in August
“It has been reported that websites of state and central government are potentially being targeted,” the alert said while urging concerned government officials to take preventive measures.

Last year, a massive ransomware attack crippled the systems of All India Institute of Medical Science (AIIMS) rendering its centralised records inaccessible, apart from other hospital services.

Overall, the Indian government recorded 19 ransomware attacks against various government organisations in 2022, nearly three times the number recorded the previous year.

The I4C alert said that an Indonesian “hacktivist” group was launching denial of service (DoS) and distributed denial of service (DDoS) attacks. DDoS attacks refer to the intentional paralysing of a computer network by flooding it with data sent simultaneously from many individual computers.

The alert also said that the hacktivist group had released a list of government websites that it claims to be targeting, which included state and Central government websites.

“”Post this alert, government employees need to ensure that they do not fall for social engineering attacks; do not click on unknown emails or links, which can compromise security of such websites. They also ensure that all software updates are up-to-date,” Anand Prakash, founder and CEO of cybersecurity firm Pingsafe said.

Last year, a Malaysia hacktivist group targeted Indian government websites over a political turmoil that erupted over comments made against Prophet Muhammad.

Malaysian hacktivist group DragonForce targeted several Indian government websites including that of the Indian Embassy in Israel (indembassisrael[.]gov[.]in), National Institute of Agricultural Extension Management (manage[.]gov[.]in).

Govt’s guidelines to secure websites

Recently the government released the third version of Guidelines for India Government Websites (GIGW 3.0), which as the name suggests, provides guidelines to officials on how to safely, and securely, develop, maintain, and manage not just government websites, but also portals and mobile applications.

It recommended that developers should encrypt passwords, ensure software and plugins are up-to-date, connection strings, tokens, and keys. Website cookies should also be secure, it added.

It also urged developers to not give website backend access to too many high-level employees.

“Administrative privileges are given thinking those would be used carefully. Although this is the ideal situation, it is not always the case. Unfortunately, employees do not think about website security when logging into the Servers or the CMS,” the guidelines said.

“Instead, their thoughts are on the task at hand. If they make a mistake or overlook an issue, this can result in a significant security issue,” the GIGW 3.0 said, adding that it was vital to ensure employees have experience in handling back-end of websites before they gain access.

Check Also

Report

CISA unveils new Cyber Incident Reporting Portal

CISA has moved its cyber incident reporting form to the new CISA Services Portal to …

Leave a Reply

Your email address will not be published. Required fields are marked *