Hacking

Double date This year, Orthodox Easter is on the same date as the western Easter, 20 April. How common is that? The Orthodox Church has a different date for Easter because it still calculates the date according to the Julian calendar, which runs 13 days behind the Gregorian calendar. But the dates coincide when the first full moon after the spring equinox occurs relatively late. The dates last coincided in 2017, but eight years is a relatively long run without this happening. This year is the ninth occasion this century when western and Orthodox Easters have been on the same day. A common date for Easter will next happen in 2028, followed by 2031, 2034, 2037 and 2041.

I’m the owner of two small galleries which sell 20th-century ceramics and artworks. One of the ways we’ve become known is through Instagram. We’ve got almost 50,000 followers and sell a lot of work through there. In May, I was away for the weekend with friends in Somerset. On Saturday morning, I saw an email in our shared work account (purporting to be) from Instagram. It was congratulating us for getting a blue tick — verification that confirms the account is an ‘authentic presence’. Thrilled, I clicked the link in the email to confirm. It took me to an official-looking Instagram page where I entered our login details. I was then met with a landing page thanking me for confirming our account’s status.

On a normal day, the Colonial Pipeline carries up to three million barrels of oil 5,500 miles from the Southern United States to New York, providing 45 percent of the East Coast’s fuel needs. On Friday, the oil stopped flowing. The pipeline was shut down after the operating company was hit by a cyberattack. Two days later and the pipeline is still sitting idle, and companies are scrambling to try and secure supplies of oil, diesel, jet fuel and gasoline. The cyberattack raises international suspicions. Was it China? Russia? Those countries specialize in such actions. The NSA however has been briefing that the culprit was an unusual cybercrime outfit known as DarkSide. DarkSide’s business is ransomware.

In his recent State of the Nation address, Vladimir Putin said that if challenged by another state, Russia’s response would be swift, harsh and ‘asymmetrical’. An unusual word, but anyone who has been paying attention to the developments in cyber warfare will know what he means. Despite Russia pulling back more than 100,000 soldiers positioned on the Ukrainian border, British troops will shortly join Ukrainian counterparts to prepare for any misadventures from the Kremlin. And if a conflict were to escalate, the action may not be limited to faraway battlefields. It might involve cyberattacks, which would hit us at home. This, too, is a threat the Ministry of Defence seeks to prevent.

In November 2014, a glowing red skeleton appeared on the computer screens of executives at Sony Pictures Entertainment. ‘Hacked,’ began the accompanying message. It went on to explain that Sony data had been stolen and would be released to the world. ‘This is only the beginning,’ it warned. Gossipy emails about Angelina Jolie, licensing problems around the character of Spider-Man, and the script of the next James Bond film were all leaked online and lapped up by showbusiness reporters. Then things became much more serious. The hackers threatened a terror attack against the premiere of Seth Rogen’s film The Interview, which mocked North Korea and its leader.

Days before the release of the becalmed Intelligence & Security Committee (ISC) report on Russian political interference, we suddenly started to hear news of Moscow’s meddling on Thursday. It’s almost as if the government, sensitive about appearing like it wants to bury the report, suddenly wants to steal the thunder and look serious. Surely not. Putting cynicism aside, it is worth taking a proper look at these two new stories of Russian interference and what they tell us about what Moscow is and isn’t doing – and, more to the point, what it can and cannot do. The first story is a leak about a leak.

Ransomware, the locking up of large networks through hacking until payment is made, is exploding. Recent attacks have crippled more than 200 city and local government networks in Baltimore, Albany and Atlanta, while specific hacking tools have been successfully used against mortgage companies, universities, hospitals, banks and consulting firms. A report this month from the cybersecurity firm, Emsisoft, reveals that the cost of ransomware in the US last year was over $7.5 billion, involving 113 state and local governments, 764 health care providers and 1,233 schools. In 2018, the FBI received reports of 1,500 ransomware attacks (the latest available FBI figures) which does not include hundreds of attacks that were never reported with ransoms secretly paid.