Russian tanks and planes entered Ukraine. But this first armed conflict in Europe since the Second World War will also be transported everywhere in cyberspace. Including in Canada. Maybe even in your computer.
Posted at 8:19 p.m.
Several computer security experts openly speak of a first “world cyber war”.
It is “the first example of global cyber warfare,” says bluntly Frédéric Cuppens, professor of computer engineering at Polytechnique Montréal and expert in computer security.
“There is always a background noise, cyberattacks are increasingly used by criminal groups and by different States in recent years. But with the scale of the conflict in Ukraine, it’s the first time we’ve had a conventional war. [en Europe] together with a cyber war,” says Jean Loup Le Roux, cyber defense expert for I & I Strategy.
Ukraine’s allies such as the United States, European Union countries, Britain and Canada should expect more intense cyberattacks from Russia, suspected by several countries for its role in computer hacks.
“It is sure that there will be a response from the Russian side. All the countries that have positioned themselves for Russia will suffer from cyberattacks, it’s obvious, ”says Nora Boulahia Cuppens, professor of computer engineering at Polytechnique Montreal and expert in computer security.
“We are in perpetual cyberwar, but the intensity has increased since Wednesday,” said Michel Juneau-Katsuya, national security expert and former agent of the Canadian Intelligence and Security Service.
“We are on the highest level of alert possible. [depuis mercredi]. It moves extremely fast,” says Alexis Dorais-Joncas, director of R&D at the Montreal office of ESET, a computer security firm.
Hydro-Québec increases its level of monitoring
In Canada, the Communications Security Establishment (CSE), a federal agency, asks organizations and companies to be vigilant and take all possible precautions. “Russia has significant cyber capabilities and has demonstrated in the past that it can use them irresponsibly,” CSE said by email.
In Quebec, Hydro-Quebec has increased its “monitoring level specifically for this threat” related to the Russia-Ukraine conflict. “For the moment, no direct threat to Hydro-Québec has been detected,” said the state-owned company by email, which specifies that it is “facing continuous cyberattack attempts”.
Last December, Global Affairs Canada, the department responsible for foreign affairs, suffered a cyberattack. Some internal internet services were suspended for a week. Ottawa has not indicated who it suspects of being behind this cyberattack.
Cyberattacks in Ukraine
The Russians launched the military air and ground invasion early Thursday morning. But they have been launching cyberattacks against Ukraine for years.
In 2015, a cyberattack on part of Ukraine’s electricity grid left hundreds of thousands of people without power in the dark for several hours.
At the end of January 2022, dozens of Ukrainian government sites were hacked. Then on Wednesday, government websites and bank sites struggled.
No one can prove beyond a reasonable doubt who committed these cyberattacks. And this is precisely a great advantage for the countries – and the “pirates” loyal to these countries – who use these tactics.
Officially, Moscow denies carrying out cyberattacks. Russian President Vladimir Putin already acknowledged in 2017 the existence of “patriotic pirates” wanting to attack Russia’s enemies.
“Whether it is publicly admitted or not does not change much, it is now part of the uses of conflict. France has even included cyberattacks in its military doctrine. With what we see in Ukraine, the Russians have been preparing the ground for several weeks,” said Jean Loup Le Roux, cyber defense expert.
psychological warfare
What are cyberattacks used for? Mainly to paralyze the enemy, affect his morale, discourage him. Sometimes to bother him in his daily life (ex: the blackout in Ukraine in 2015).
“Sabotaging to lower the enemy’s morale has existed since the dawn of time,” says Jean Loup Le Roux. If the enemy is prepared and strong psychologically, the attack will be more difficult. But if his bank’s mobile app fails and he wonders if he’ll be able to pay for his groceries…”
Could Quebecers become the target of cyberattacks? Not if they have no ties to Ukraine or Russia, Le Roux believes. In short, the ordinary citizen can breathe through his nose. On the other hand, more strategic organizations (eg Hydro-Quebec) must be extra careful against cyberattacks, whether it is the Russian intelligence service (the GRU) or patriotic hackers. “Be prepared,” said Mr. Le Roux.
With the collaboration of Mélanie Marquis and information from AP and AFP
Seven tips to avoid being the victim of a cyberattack
Whether it’s a foreign country, criminals trying to extort money from you through ransomware, or identity theft, the way for a private citizen to protect themselves against a cyberattack is relatively the same. According to the experts consulted by La Presse, here are seven ways to increase your digital security:
1) Immediately make your security updates on your mobile and computer devices;
2) Use a two-factor authentication app;
3) Use a password manager, or never use the same password twice;
4) Install an antivirus on his computer;
5) Give a minimum of personal information on social networks, and modify some of your information (ex: indicate the wrong date of birth on Facebook);
6) Do not use an email address with your full name and/or date of birth;
7) Shut down your computer at night. If possible, use one computer for your work and another equally well-protected computer for your personal needs (eg your finances).