On Monday, the Worldwide Felony Court docket (ICC) introduced that it is investigating a brand new “refined” cyberattack that focused its programs final week.
In an announcement yesterday, the ICC revealed that it had contained a “refined and focused” cybersecurity incident, which was found by programs in place to detect cyberattacks concentrating on its programs.
“This incident, the second of this sort in opposition to the ICC lately, was swiftly found, confirmed and contained, via the Court docket’s alert and response mechanisms. A Court docket-wide impression evaluation is being carried out, and steps are already being taken to mitigate any results of the incident,” the ICC stated.
“The Court docket considers it important to tell the general public and its States Events about such incidents in addition to efforts to deal with them, and requires continued help within the face of such challenges.”
In the meanwhile, the ICC has but to supply extra data concerning the character of the cyberattack, its impression on the ICC’s programs, or whether or not the attackers have been capable of entry or exfiltrate any information or recordsdata.
When requested to supply further particulars concerning this incident, spokesperson Fadi El-Adballah advised BleepingComputer that the ICC can’t present additional particulars or data past what had been shared within the Monday press launch.
September 2023 cybersecurity incident
That is the second cyberattack concentrating on the ICC lately, following the disclosure of one other cybersecurity incident in September 2023.
Roughly one month later, the ICC shared extra details about the September 2023 incident, stating that its programs had been breached for the aim of cyber espionage.
“The proof accessible to this point signifies a focused and complicated assault with the target of espionage. The assault can due to this fact be interpreted as a critical try to undermine the Court docket’s mandate,” the worldwide tribunal stated.
The courtroom discovered no proof linking the 2023 breach to a particular espionage group, and the impression of the assault stays unclear, with no indication that information entrusted to the ICC was compromised.
The ICC additionally added on the time that the assault got here at a second of “broader and heightened safety issues for the Court docket,” together with “day by day and protracted makes an attempt to assault and disrupt its programs” and an “virtually profitable try to infiltrate a hostile intelligence officer into the Court docket beneath the guise of an intern.”
Established in 2002, the ICC is a world tribunal based mostly in The Hague, Netherlands, that investigates and prosecutes critical crimes that have an effect on the worldwide neighborhood, similar to struggle crimes, genocide, and crimes in opposition to humanity.
For instance, in March 2023, it issued an arrest warrant for Russian President Vladimir Putin associated to crimes related to Russia’s invasion of Ukraine, and one other one in November for Israeli Prime Minister Benjamin Netanyahu for alleged struggle crimes through the Palestine battle.
Whereas cloud assaults could also be rising extra refined, attackers nonetheless succeed with surprisingly easy strategies.
Drawing from Wiz’s detections throughout 1000’s of organizations, this report reveals 8 key strategies utilized by cloud-fluent risk actors.
