It’s seen as a growing problem for governments, corporations, and individuals. But the hackers remained at large, as did the rest of the ransom.Cyber espionage is the unauthorized use of computer networks and other resources to access or transfer secret, classified, or sensitive information. But that’s not always the case: After the May 2021 ransomware attack on Colonial Pipeline, FBI agents were able to identify the bitcoin wallet the hackers used and recover about half of the $5 million ransom the fuel company had paid. Hackers may feel emboldened by the fact that because they’re able to use anonymous tools, they’ll remain underground once the ransom is paid. Hacktivists often rely on anonymous cryptocurrencies to reduce the chances of getting caught. They’ve influenced the outcome of political elections, created havoc at international events, and helped companies succeed or fail. The deliberately recruited and highly valued cybercriminals have the technical expertise to shut down anything from government infrastructures to financial systems to utility resources. The exfiltration of sensitive data (along with threats to post it online) can cause even more havoc and scandal-exposing company secrets or even military intelligence. Monsegur noted, “In the rare instance where hackers can obtain intellectual property, say from a manufacturer, they can sell that data upstream to other countries.” 4. In fact, some data isn’t just more valuable-it can have seismic effects when stolen.Ī cyber-espionage play can also be used by an adversarial country to undermine other counties. If there’s one thing modern ransomware hackers have figured out, it’s that not all data is created equally. Cyber espionage and exfiltration are putting more data at risk.Ĭyber espionage is a new flavor of ransomware in which hackers do more homework to identify the biggest payloads from their targets, such as classified, sensitive data or proprietary, intellectual property.

In effect, the PSOAs are operating like a business, selling hacking as a service. When states hire “private-sector offensive actors” (PSOA), the hackers gain access to very sophisticated off-the-shelf tools and open-source penetration testing tools to carry out large-scale cyberattacks. Most of these attacks targeted government agencies and think tanks in the United States. In fact, Microsoft reported that state-sponsored hackers have seen healthy success rates this year, with Russia accounting for 58% of state-sponsored hacks. Hacktivists today are less likely to be ragtag, loosely organized small groups, and more likely to have state money and power behind their attacks. State-sponsored hackers are gaining more power.

But cyber espionage is a new spin on ransomware in that the attackers who seize data don’t usually want money-they want your data so they can expose it publicly.Īs The Washington Post reported recently, hacktivists have “capped off a nine-month run of stunning breaches.” In October 2021, when hacktivists published a huge haul of data stolen from streaming site Twitch, including all of the site’s source code, the hackers said Twitch had become a “disgusting cesspool.” The hacktivists wanted publicity for their message, not ransom money.Ģ. Your current ransomware strategy probably isn’t enough.īusiness leaders typically develop emergency plans for dealing with ransomware attackers who only want ransoms paid-which usually means either paying the ransom or designing storage so that data can quickly be replaced. What to Know About Hacktivists, How They’re Evolving, and What You Can Do About It 1. “When you watch a film like ‘War Games’ or ‘Hackers,’ they seem childish-not as malicious as they could be,” warned Hector Monsegur, the well-known former hacker, during Pure’s webinar “Ransomware Nightmares? Defend Your Data!” “But we’re in a different era. But while most ransomware attackers are usually just out for the ransom itself, attackers known as “hacktivists” attack for reasons besides money. These attacks have brought major cities and hospitals to a grinding halt. Online attackers using ransomware as their weapon of choice are at the top of the cybersecurity headlines at the moment-and with good reason. States and governments have enlisted hacktivists as their own national “cyber espionage” task forces, funding attackers and handing them sophisticated technology “weapons.” What will the impact be of hacktivists on the warpath? If history is any indicator, entire governments could be destabilized.

Define espionage