Sign In
Learn bits
Science & Tech.
Mahesh

25/12/23 12:08 PM IST

Ransomware attacks on Indian IT firms

In News
  • IT services provider HCL Technologies was hit by a ransomware incident within a restricted cloud environment associated in one of its projects.
About HCL Tech
  • HCL Tech is an Indian information technology company providing solutions in the digital realm, including end-to-end digital offerings, cloud-based solutions, and software.
  • The company is one of the top software solution providers in India.
  • Recently, company, in its quarterly earnings report, shared that it was hit by a ransomware incident in an isolated cloud environment.
  • Ransomware is extortion software designed to lock or encrypt a device or data on a system and then demand a ransom for its release.
  • The attacks follow a simple plan wherein attackers gain access to a device or protected data in the cloud
  • Depending on the nature of the ransomware, it will then lock or encrypt devices, data stored in the cloud, or the entire internal network of an organisation
  • Attackers usually leave behind a message with instructions on the ransom amount, mode of transfer, or instructions on how to contact them for further guidance.
Ransomware attacks - matter of Concern
  • Indian organisations are increasingly targeted by ransomware attacks.
  • A 2023 study conducted by Sophos, a cybersecurity company, showed that 73% of organisations reported being victims of ransomware attacks, up from 57% the previous year.
  • Of these, 77% of organisations reported that attackers succeeded in encrypting data, with 44% paying the ransom to retrieve their data, a significant drop from 78% compared to the previous year.
  • However, despite paying the ransom, companies doubled their cost of recovery for the data held hostage by threat actors compared to organisations that did not pay the ransom and relied on backups.
  • Additionally, according to the Indian ransomware report released by India’s Computer Emergency Response Team (CERT-In),a 51% increase in ransomware incidents was reported in H1 2022, with a majority of these attacks targeting data centres, IT, and TeS sectors in the country.
Target Organisations
  • Threat actors tend to focus their attacks on organisations that hold valuable data.
  • The more value the data has to the organisation and its stakeholders, the higher the chances that the ransom will be paid.
  • IT organisations and software vendors hold a lot of valuable data, including sensitive information like intellectual property.
  • If leaked by threat actors, it could lead to a drop in their value and replication of software, devaluing the company and threatening its revenue streams, making them a valuable target for cybercriminals.
  • IT organisations providing cloud security and data solutions also hold large repositories of data for their clients. Successful attacks on them could potentially open the channel to target supply chains, adding pressure on companies to pay the ransom.
  • Data held by IT organisations could include personally identifiable data of clients’ users, intellectual property, access credentials, and even financial information.
  • This data can be leveraged to launch further attacks.
  • IT organisations are also among the first to adopt new technologies and encourage the use of open architecture, which may not have the highest levels of protection against cyberattacks, making them a target for cybercriminals.
Source- The Hindu

More Related Current Affairs View All

20 Feb

The Maharashtra Protection of Interest of Depositors (in Financial Establishments) Act, 1999

'Investors who were defrauded in the Torres Ponzi scam may receive about Rs 40 crore over the next six months.' The Mumbai Police’s Economic Offences Wing (EOW) has begun

Read More

18 Feb

Aravali safari park project

'The Haryana government’s ambitious 3,858 hectare Aravali safari park project spread across Gurugram and Nuh — which was one of the poll promises of the ruling Bharatiy

Read More

17 Feb

President’s rule function

'Recently,  four days after Manipur Chief Minister N. Biren Singh’s resignation, the Union government announced that President’s rule has been implemented in the v

Read More

India’s First Ai-Driven Magazine Generator

Generate Your Custom Current Affairs Magazine using our AI in just 3 steps