Sign In
Learn bits
Science & Tech.
Mahesh

25/12/23 12:08 PM IST

Ransomware attacks on Indian IT firms

In News
  • IT services provider HCL Technologies was hit by a ransomware incident within a restricted cloud environment associated in one of its projects.
About HCL Tech
  • HCL Tech is an Indian information technology company providing solutions in the digital realm, including end-to-end digital offerings, cloud-based solutions, and software.
  • The company is one of the top software solution providers in India.
  • Recently, company, in its quarterly earnings report, shared that it was hit by a ransomware incident in an isolated cloud environment.
  • Ransomware is extortion software designed to lock or encrypt a device or data on a system and then demand a ransom for its release.
  • The attacks follow a simple plan wherein attackers gain access to a device or protected data in the cloud
  • Depending on the nature of the ransomware, it will then lock or encrypt devices, data stored in the cloud, or the entire internal network of an organisation
  • Attackers usually leave behind a message with instructions on the ransom amount, mode of transfer, or instructions on how to contact them for further guidance.
Ransomware attacks - matter of Concern
  • Indian organisations are increasingly targeted by ransomware attacks.
  • A 2023 study conducted by Sophos, a cybersecurity company, showed that 73% of organisations reported being victims of ransomware attacks, up from 57% the previous year.
  • Of these, 77% of organisations reported that attackers succeeded in encrypting data, with 44% paying the ransom to retrieve their data, a significant drop from 78% compared to the previous year.
  • However, despite paying the ransom, companies doubled their cost of recovery for the data held hostage by threat actors compared to organisations that did not pay the ransom and relied on backups.
  • Additionally, according to the Indian ransomware report released by India’s Computer Emergency Response Team (CERT-In),a 51% increase in ransomware incidents was reported in H1 2022, with a majority of these attacks targeting data centres, IT, and TeS sectors in the country.
Target Organisations
  • Threat actors tend to focus their attacks on organisations that hold valuable data.
  • The more value the data has to the organisation and its stakeholders, the higher the chances that the ransom will be paid.
  • IT organisations and software vendors hold a lot of valuable data, including sensitive information like intellectual property.
  • If leaked by threat actors, it could lead to a drop in their value and replication of software, devaluing the company and threatening its revenue streams, making them a valuable target for cybercriminals.
  • IT organisations providing cloud security and data solutions also hold large repositories of data for their clients. Successful attacks on them could potentially open the channel to target supply chains, adding pressure on companies to pay the ransom.
  • Data held by IT organisations could include personally identifiable data of clients’ users, intellectual property, access credentials, and even financial information.
  • This data can be leveraged to launch further attacks.
  • IT organisations are also among the first to adopt new technologies and encourage the use of open architecture, which may not have the highest levels of protection against cyberattacks, making them a target for cybercriminals.
Source- The Hindu

More Related Current Affairs View All

29 Jan

Classifying denotified tribes

'The Anthropological Survey of India (AnSI) and Tribal Research Institutes (TRI) across the country have for the first time comprehensively categorised 268 denotified, semi-nomadic

Read More

29 Jan

GSLV-F15 launched successfully from Sriharikota

'The Indian Space Research Organisation (ISRO) successfully launched their GSLV-F15 carrying the NVS-02  at Sriharikota, Andhra Pradesh, marking ISRO's 100th rocket mission.'

Read More

29 Jan

ASER 2024

'Since 2005, the NGO Pratham has released the Annual Status of Education Report (Rural) to measure basic reading and arithmetic levels among school children, attendance in school a

Read More

India’s First Ai-Driven Magazine Generator

Generate Your Custom Current Affairs Magazine using our AI in just 3 steps