Homepage / Technology / Hackers find 'ideal testing ground' for attacks: developing countries
Deneme Bonusu Veren Siteler Deneme Bonusu 2024 Explore the Magic of WildCardCity Güvenilir Bahis Siteleri En İyi Kumar Siteleri Balıkesir Triatlonuna Avrupadan Ödül Tricks of the Aviator gambling establishment game by Spribe Çevrim Içi Kumar Siteleri “bonus” Yalanıyla Kandırıyor En Güvenilir Canlı On Line Casino Siteleri Xbetting-tips Com Uncovering the Abundant Tapestry of Ozwin Gambling establishment Evaluating Board Portal Providers Uncovering the Wealthy Tapestry of Ozwin On line casino Electronic Data Area Providers Evaluation Cobra Internet casino: Raising the Australian On the internet Video gaming Practical experience 4 Things to Search for in Safeguarded Cloud Safe-keeping Fastpay On line casino Australia – Simple and No-Taxation Wagering Web page officielle franзaise de Joka Gambling establishment The Software Development Universe Game Woo Internet casino – Enjoy Slot machine games around australia Ostdeutsche Biersorten What Are Virtual Data Rooms? Vitamin D Receptor Polymorphisms Revue du Casino BlackLabel Faktory, kterй ovlivnujн hodnocenн ceskэch online kasin How to Make the Most of Your Web Development Organization and Advertising Efforts L’essor des casinos en ligne en France Boost Meeting Efficiency With Boardroom Technology Developments WildJoker Casino WildCardCity On line casino – Guaranteed Australian Gambling Portal WildCardCity Casino – The Ideal On the internet Gambling establishment within australia Modern Technologies Produce Sharing Documents Online Faster and More Protect Free Virtual Info Room pertaining to Speedy Due Diligence A Review of Data Area Software For people who do buiness Five Board Bedroom Features Which will help You Acquire a More Productive Boardroom Electronic Systems To your Business Understanding Legal Terms and Laws in Today’s World The Laws and Contracts of Hollywood: A Sunset Blvd. Tale Legal Discussion Between Johnny Cash and Antonin Scalia Legal Insights: What Teens Should Know Legal Issues and Exceptions: What You Need to Know Legal Insights and Expert Analysis Celebrity Dialogue: Legal Matters in the 21st Century Famous Personalities Discuss Legal Issues The Boys in the Boat: Legal Advisors and The Quest for Legal Knowledge Understanding Legal Matters: Q&A on Criminal Law, Joint Ventures, and More Enticing Title The Departed: Understanding Basic Work Requirements and Legal Rights Youth Slang Blog Article Legal Insights: A Journey into the World of Law The Ins and Outs of Legal Matters: Everything You Need to Know Legal Insights and Trends: A Rap Guide Mysterious Legal Matters Unveiled Insights and Information: Understanding Various Laws and Regulations Famous People of the 21st Century The Circle of Legal Life The Intersection of Fashion Law, Legal Translation, and THC Oil: A Modern Legal Guide Legal Q&A: Understanding Joinder Federal Rules and More Understanding Legal Terms and Conditions: A Comprehensive Guide Understanding Legal Documentation in a Fun Way! Understanding Legal Aspects: From Islamic Law of Inheritance to Farm Law Protests Understanding Legal Rights: A Guide to Legal Regulations and Requirements Understanding Legal Guidelines and Agreements Famous 21st Century People in Conversation Mysterious Legal Matters Unveiled Legal Matters and Real Estate: A Conversation Between Cameron Boyce and Donald Trump Understanding Legal Expertise and Why It Matters Legal FAQs and Expert Services Understanding Legal Ramifications: Common Law Ontario Health Benefits and More The Ins and Outs of Legal Requirements: From FBI Academy Physical Requirements to Silver Lake Fishing Rules The Legal Underworld: Understanding the Significance of Laws and Rights Legal Conversations: A Dialogue Between Jon Jones and Chadwick Boseman Legal Beats: Bobcats, Real Estate, Babysitting, and More Legal Matters and Netflix VPN Diabolique: Legal Affairs and Deception Ben Shapiro and Eddie Van Halen Discuss Legal Matters Legal Aid and Other Legal Issues Q&A Famous 21st Century Personalities in Dialogue Youthful Blog Post Expert Legal Insights: Top 8 Law Firms in Australia, Quasi Contracts, and More! Youth Slang in Legal Matters Steps to make Your Mother board Room Even more Productive and Meaningful Choosing Data Rooms for Homework The Enigmatic World of Legal Affairs and Contracting The Mystery of Legal Matters Understanding Legal Mandates and Guidelines in the Business World Celebrity Dialogue: Legal Matters and Personal Names Legal Questions: Answered! Mysterious Legal Insights and Tips The Mysterious World of Legal Agreements Legal Lingo: Reviews, Agreements, and More Exploring Legal Education and Responsibilities: A Comprehensive Guide Unconventional Wisdom: A Dialog Between 21st Century Icons Mysterious Legal Matters Unraveled The Legal Maze: Navigating the Legal Landscape Dialogue between Jared Kushner and Vasyl Lomachenko Legal Matters: A Conversation Between Prince and Lionel Messi Get Clued In: The Legal Lowdown for Gen Z Famous People of the 21st Century Talk About Legal Matters The Enigmatic World of Legal Agreements and Terms Are You Breaking the Law? Unusual Legal Questions Answered Understanding Legal Services, Parental Responsibility Laws, and More Understanding Legal Agreements and Requirements

Technology

Hackers find 'ideal testing ground' for attacks: developing countries

The attack had the hallmarks of something researchers had dreaded for years: malicious software using artificial intelligence that could lead to a new digital arms race in which A.I.-driven defenses battled A.I.-driven offenses while humans watched from the sidelines.

But what was not as widely predicted was that one of the earliest instances of that sort of malware was found in India, not in a sophisticated British banking system or a government network in the United States.

Security researchers are increasingly looking in countries outside the West to discover the newest, most creative and potentially most dangerous types of cyberattacks being deployed.

Read more from the New York Times
Puerto Rico’s power authority effectively files for bankruptcy
Tesla in talks to set up electric car factory in Shanghai
G.M. and Tesla shareholders rebuff dissidents’ proposals

As developing economies rush to go online, they provide a fertile testing ground for hackers trying their skills in an environment where they can evade detection before deploying them against a company or state that has more advanced defenses.

The cyberattack in India used malware that could learn as it was spreading, and altered its methods to stay in the system for as long as possible. Those were “early indicators” of A.I., according to the cybersecurity company Darktrace. Essentially, the malware could figure out its surroundings and mimic the behavior of the system’s users, though Darktrace said the firm had found the program before it could do any damage.

“India is a place where newer A.I. attacks might be seen for the first time, simply because it is an ideal testing ground for those sorts of attacks,” said Nicole Eagan, the chief executive of Darktrace.

At times, these attacks are simply targeting more susceptible victims. While companies in the United States will often employ half a dozen security firms’ products as defensive measures, a similar company elsewhere may have just one line of defense — if any.

In the case of attacks carried out by a nation-state, companies in the United States can hope to receive a warning or assistance from the federal government, while companies elsewhere will often be left to fend for themselves.

Cybersecurity experts now speculate that a February 2016 attack on the central bank of Bangladesh, believed to have been carried out by hackers linked to North Korea, was a precursor to similar attacks on banks in Vietnam and Ecuador.

That hackers managed to steal $81 million from the Bangladesh Bank generated headlines because of the size of the heist. But what interested cybersecurity experts was that attackers had taken advantage of a previously unexplored weakness in the bank’s computers by undermining its accounts on Swift, the international money transfer system that banks use to move billions of dollars among themselves each day.

It was an unprecedented form of cyberattack. But since then, the cybersecurity firm Symantec has found the method used against banks in 31 countries.

The malware discovered by Darktrace researchers stopped short of being a full-fledged A.I.-driven piece of software. It did, however, learn while it was in the system, trying to copy the actions of the network in order to blend in.

“What was concerning was that this attack, once it got into the network, used A.I. techniques, like trying to learn the behaviors of employees on the network, to remain undetected for as long as possible,” Ms. Eagan said. She said she saw a future in which countries raced against one another to hire people skilled in developing complex algorithms that could be used to run such malware.

Ms. Eagan’s company, which has headquarters in Cambridge, England, and San Francisco, has increasingly found hacking incidents in India since it expanded there.

As other cybersecurity companies enter Southeast Asia, Africa and other parts of the world where they have not had much presence, they will continue to discover new types of malware being tested in those markets, said Allan Liska, a senior threat intelligence analyst at Recorded Future, a cybersecurity firm based in Somerville, Mass.

“For several years, Taiwan and South Korea have been proven testing grounds for some of the more advanced groups in China,” Mr. Liska said. “Those countries have high-speed internet, widespread internet penetration and not a lot of security infrastructure in place.”

He added: “We see a pattern among the attackers. They test something, make improvements, and then six weeks later test again before launching it at their true targets.”

As internet use has expanded in Africa, Mr. Liska said, his company has noticed an increase in so-called spear-phishing attacks in which hackers appear to be testing their skills in English- and French-speaking African countries. Spear phishing employs messages that appear innocuous but contain dangerous malware. They are one of the most popular forms of cyberattacks, though they largely depend on the attackers’ ability to hone a message that can fool a victim into opening a link or attachment.

He said that in the spear-phishing tests his company had found, attackers appeared to be testing their language, but did not include the actual malware in the link, what he described as the payload.

“They save that payload for when they are going to actually launch their attack in whatever French- or English-speaking country they are after,” Mr. Liska said.

Countries across Southeast Asia and the Middle East that have come online over the last decade have been tempting targets for hackers, said Chris Rock, an Australian security researcher and chief executive of the cybersecurity firm Kustodian.

“They are a testing ground for different kinds of environments,” he said. “For hackers, they can be low-hanging fruit.”

Doing tests in a country that presumably has fewer defenses is a double-edged sword, Mr. Rock said. On one hand, attackers can hone their skills. On the other hand, they risk being discovered. Once a cybersecurity firm has the signature of an attack, it can build defenses against it, and spread those defenses among its clients.

Mr. Rock said that if one target “has, actually, installed a good defense and you get caught, then you have wasted your time.”

Source: Tech CNBC
Hackers find 'ideal testing ground' for attacks: developing countries

Comments are closed.