Russian tanks and planes entered Ukraine. But this first armed conflict in Europe since the Second World War will also be transported everywhere in cyberspace. Especially in Canada. Maybe even in your computer.
Posted at 8:19 p.m.
Several computer security experts openly speak of a first “world cyber war”.
It is “the first example of global cyber warfare,” says bluntly Frédéric Cuppens, professor of computer engineering at Polytechnique Montréal and expert in computer security.
“There is always a background noise, cyberattacks are increasingly used by criminal groups and by different States in recent years. But with the scale of the conflict in Ukraine, it’s the first time we’ve had a conventional war. [en Europe] together with a cyber war,” says Jean Loup Le Roux, cyber defense expert at I&I Strategy.
Ukraine’s allies like the United States, European Union countries, Britain and Canada should expect more intense cyberattacks from Russia, suspected by many countries of carrying out to computer hacking.
“It is sure that there will be a response from the Russian side. All the countries that have taken a stand against Russia will suffer from cyberattacks, it’s obvious,” says Nora Boulahia Cuppens, professor of computer engineering at Polytechnique Montréal and expert in computer security.
“We are in perpetual cyber warfare, but the intensity has increased since Wednesday,” said Michel Juneau-Katsuya, national security expert and former agent of the Canadian Security Intelligence Service.
“We are on the highest level of alert possible. [depuis mercredi]. It’s moving extremely fast,” says Alexis Dorais-Joncas, director of R&D at the Montreal office of ESET, a computer security firm.
Hydro-Québec increases its level of monitoring
In Canada, the Communications Security Establishment (CSE), a federal agency, asks organizations and companies to be vigilant and take all possible precautions. “Russia has significant cyber capabilities and has demonstrated in the past that it can use them irresponsibly,” CSE said by email.
In Quebec, Hydro-Quebec has increased its “monitoring watch level specifically for [la] threat” linked to the Russia-Ukraine conflict. “For the moment, no direct threat to Hydro-Québec has been detected,” said the state-owned company by email, which specifies that it is “facing continuous cyberattack attempts”.
Last December, Global Affairs Canada, which oversees the Department of Foreign Affairs, suffered a cyberattack. Some internal internet services were suspended for a week. Ottawa has not indicated who it suspects of being behind this cyberattack.
Cyberattacks in Ukraine
PHOTO VALENTYN OGIRENKO, REUTERS
At the end of January, dozens of Ukrainian government sites were hacked.
The Russians launched the military air and ground invasion early Thursday morning. But they have been launching cyberattacks against Ukraine for years.
In 2015, a cyberattack on part of Ukraine’s electricity grid knocked out power to hundreds of thousands of people and left them in the dark for hours.
At the end of January, dozens of Ukrainian government sites were hacked. Then, on Wednesday, government websites and bank sites struggled.
No one can prove beyond a reasonable doubt who committed these cyberattacks. And this is precisely a great advantage for the countries – and the “pirates” loyal to these countries – who use these tactics.
Officially, Moscow denies committing cyberattacks. Russian President Vladimir Putin, however, already recognized in 2017 the existence of “patriotic pirates” wanting to attack Russia’s enemies.
“Whether it is publicly admitted or not does not change much. It is now part of the uses of conflict. France has even included cyberattacks in its military doctrine. With what we see in Ukraine, the Russians have been preparing the ground for several weeks,” said Jean Loup Le Roux, cyber defense expert.
psychological warfare
What are cyberattacks used for? Mainly to paralyze the enemy, affect his morale, discourage him. Sometimes to bother him in his daily life (witness the blackout in Ukraine in 2015).
“Sabotaging to undermine the enemy’s morale has existed since the dawn of time,” says Jean Loup Le Roux. If the enemy is prepared and strong psychologically, the attack will be more difficult. But if his bank’s mobile app fails and he wonders if he’ll be able to pay for his groceries…”
Could Quebecers become the target of cyberattacks? Not if they have no ties to Ukraine or Russia, Le Roux believes. In short, the ordinary citizen can breathe through his nose. On the other hand, more strategic organizations (eg Hydro-Quebec) must be extra careful against cyberattacks, whether it is the Russian intelligence service (the GRU) or patriotic hackers. “Be prepared,” said Mr. Le Roux.
With Melanie Marquis, The Pressand according to the Associated Press and Agence France-Presse
Seven tips to avoid being the victim of a cyberattack
Whether it’s a foreign country, criminals out to extort money from you through ransomware, or identity theft, the way a private citizen can protect themselves from a cyberattack is basically the same. According to the experts consulted by The Presshere are seven ways to strengthen your digital security:
1) Make your security updates immediately on your mobile and computer devices.
2) Use a two-factor authentication app.
3) Use a password manager, or never use the same password twice.
4) Install an antivirus on your computer.
5) Give a minimum of personal information on social networks, and modify some of your information (for example, indicate the wrong date of birth on Facebook).
6) Do not use an email address with your full name and/or date of birth.
7) Shut down your computer at night. If possible, use one computer for your work and another equally well-protected computer for your personal needs (for example, your finances).