Monday, March 7, 2011

Computer intrusion: before Bercy, the Canadian Department of Treasury

The similarities are disturbing: by Bercy, the Canadian Department of Finance and the Treasury Board, the body responsible for the management services of the federal state, had admitted being victims of piracy scale, mid-February. Beyond the target, the modus operandi of the two operations is also similar: taking control of a workstation through a virus-like "Trojan horse" that reveals passwords in the mail from the computer and then connect to other positions or departments.

Another thing in common: in both cases, traces of the attack suggests an origin in China. A track on which the services of both countries have remained very cautious and the origin of an attack can be masked to believe she is from another country. Mid-February, China had strongly denied any involvement in attacks against the Canadian government departments, just as it had strongly protested when American diplomacy had been accused of having participated or condoned the attacks that have targeted Google in early 2010 .

Both attacks, however, are not quite similar. According to the budget minister, Baroin, hackers have targeted the French Ministry of Finance were particularly interested in issues concerning the organization of the G20, which held a summit in Cannes in November. While spying on Canadian computers began after the summit in Toronto last year.

The Canadian government refused to comment on the intrusion and to specify what data had been pirated, merely asserting that the tax records and personal information of Canadians were not affected. The Canadian government had taken seriously, however, this attack: as soon as it detected, the department had cut full Internet access in several services to avoid spreading the virus.

Part of Canadian officials found themselves laid off for several weeks, unable to access the Internet or network department. A different approach was taken at Bercy, according to the explanations of Baroin, who explained that Monday on Europe 1 radio that "this weekend, a huge maintenance at Bercy was conducted to clean the whole" positions.

The intrusion into Canadian and French ministries are not quite a first. From 2009, a report from the Munk Centre in Toronto had demonstrated the existence of a network of computer espionage for embassies, government offices and departments of most countries. Called "GhostNet" network, which was primarily the Asian diplomats and supporters of the Dalai Lama, broke into computer networks of several embassies and foreign ministries of countries like Iran, Bangladesh or Latvia.

According to researchers, the network was based in China, they could not establish a direct or indirect involvement of Chinese authorities.

No comments:

Post a Comment