On Monday, the Worldwide Felony Court docket (ICC) introduced that it is investigating a brand new “subtle” cyberattack that focused its programs final week.
In a press release yesterday, the ICC revealed that it had contained a “subtle and focused” cybersecurity incident, which was found by programs in place to detect cyberattacks focusing on its programs.
“This incident, the second of this sort in opposition to the ICC lately, was swiftly found, confirmed and contained, by means of the Court docket’s alert and response mechanisms. A Court docket-wide impression evaluation is being carried out, and steps are already being taken to mitigate any results of the incident,” the ICC stated.
“The Court docket considers it important to tell the general public and its States Events about such incidents in addition to efforts to deal with them, and requires continued assist within the face of such challenges.”
In the intervening time, the ICC has but to supply extra info relating to the character of the cyberattack, its impression on the ICC’s programs, or whether or not the attackers had been capable of entry or exfiltrate any knowledge or recordsdata.
When requested to supply further particulars relating to this incident, spokesperson Fadi El-Adballah instructed BleepingComputer that the ICC can’t present additional particulars or info past what had been shared within the Monday press launch.
September 2023 cybersecurity incident
That is the second cyberattack focusing on the ICC lately, following the disclosure of one other cybersecurity incident in September 2023.
Roughly one month later, the ICC shared extra details about the September 2023 incident, stating that its programs had been breached for the aim of cyber espionage.
“The proof accessible to this point signifies a focused and complex assault with the target of espionage. The assault can due to this fact be interpreted as a severe try to undermine the Court docket’s mandate,” the worldwide tribunal stated.
The court docket discovered no proof linking the 2023 breach to a particular espionage group, and the impression of the assault stays unclear, with no indication that knowledge entrusted to the ICC was compromised.
The ICC additionally added on the time that the assault got here at a second of “broader and heightened safety considerations for the Court docket,” together with “every day and chronic makes an attempt to assault and disrupt its programs” and an “virtually profitable try to infiltrate a hostile intelligence officer into the Court docket underneath the guise of an intern.”
Established in 2002, the ICC is a global tribunal based mostly in The Hague, Netherlands, that investigates and prosecutes severe crimes that have an effect on the worldwide group, comparable to warfare crimes, genocide, and crimes in opposition to humanity.
For instance, in March 2023, it issued an arrest warrant for Russian President Vladimir Putin associated to crimes related to Russia’s invasion of Ukraine, and one other one in November for Israeli Prime Minister Benjamin Netanyahu for alleged warfare crimes in the course of the Palestine battle.
Whereas cloud assaults could also be rising extra subtle, attackers nonetheless succeed with surprisingly easy strategies.
Drawing from Wiz’s detections throughout 1000’s of organizations, this report reveals 8 key strategies utilized by cloud-fluent menace actors.
