Cybersafetyconnections December 23,2024 vol# 200
MILESTONE: Woohoo this is the 200th publication since I started over 3 years ago! Still staying in the cybersecurity fight.
We are taking a break till January 6th, 2024.Happy holidays, Merry Christmas and a very prosperous Happy New Year.
- Back to Konbriefing there was a Cyber-attack on a telecommunications provider in Namibia Telecom Namibia – Windhoek, Namibia.
- Customers data were leaked and found on social media and on the dark web.
- The reason for the cyberattack is ransom.
- The ransomware group that claimed responsibility was a group named Hunters International.
- Here is how Telecom Namibia mitigated loss from the cyberattack and other measures recommended.
What happened?
According to ecofinagency.com , there was a cyberattack on telecommunications provider in Namibia Telecom Namibia – Windhoek, Namibia.
Who was impacted?
Customers were impacted, their data including sensitive personal data such as identification details, addresses, and banking information were found on social media and the dark web already.
Namibia has a Data Protection Act that could impose fines for data breaches, but it has not been enforced yet. This leaves customers with few legal protections, although they may still claim damages for negligence.
Which cybercriminal were responsible?
Ramsomware :There is over 450……
The attack was orchestrated by a ransomware group named Hunters International, which exfiltrated around 626.3GB of data while threatening to release it unless their demands were met.
Following the expiration of the ransom deadline, sensitive data was indeed leaked, raising concerns about the potential for phishing schemes and identity theft.
Why did it happen?
It was mentioned that the ransomware group named Hunters International, that claimed responsibility for the cyberattack demanded ransom.
Here is how Telecom Namibia mitigated loss from cyberattack
OWASP Threat and Safeguard Matrix
This incident is not isolated; it reflects a broader rise in cyberattacks in Namibia, where over 1.18 million cyber incidents were documented from January to September 2024, as noted in the Communications Regulatory Authority of Namibia’s Cybersecurity Landscape Report.
According to thebrief.com Telecom Namibia’s reputation has taken a big hit. The exposure of customer data could lead to lawsuits for negligence.
The company might face financial losses from lost clients and regulatory scrutiny, as well as the costs of managing the breach.
Telecom Namibia now faces more pressure to improve its data protection practices. So far, Telecom took the following steps:
- There was an investigation and the investigation team and cybersecurity experts were diligently analyzing the data and keeping all stakeholders updated.
- Telecom Namibia contained the initial threat three weeks prior, and the company decided not to pay the ransom demanded by the attackers.
- This resulted in the leaked data being shared on social media and the dark web.
Instead of Copilot, we have recommendations from thebrief.com which are:
- Companies/Businesses must expect that leaked information will be used in phishing attacks. This means they need to educate customers on how to recognize and avoid scams and secure their accounts.
- There should be full investigation to find out how the breach happened and fix vulnerabilities, with help from cybersecurity experts.
- Telecom Namibia should strengthen their security systems, including firewalls and intrusion detection to prevent future attacks.
- Telecom Namibia should constantly evaluate and update their cybersecurity measures to address new threats.
- Telecom Namibia should provide regular training for employees, and this can help reduce the risk of phishing and social engineering attacks, which criminals often exploit.
Conclusion
From thebrief.com this incident shows the urgent need for better internal controls and compliance with cybersecurity standards and improved legislative frameworks to combat cybercrime effectively.
The company must work hard to regain customer trust and prevent future breaches.
The coordinated response of government, businesses, and international partners is crucial to building a resilient and secure digital environment moving forward.
Subscribe to get the latest blog.
