On Monday, the Worldwide Prison Court docket (ICC) introduced that it is investigating a brand new “subtle” cyberattack that focused its methods final week.
In an announcement yesterday, the ICC revealed that it had contained a “subtle and focused” cybersecurity incident, which was found by methods in place to detect cyberattacks focusing on its methods.
“This incident, the second of this kind in opposition to the ICC lately, was swiftly found, confirmed and contained, by the Court docket’s alert and response mechanisms. A Court docket-wide impression evaluation is being carried out, and steps are already being taken to mitigate any results of the incident,” the ICC stated.
“The Court docket considers it important to tell the general public and its States Events about such incidents in addition to efforts to deal with them, and requires continued assist within the face of such challenges.”
In the mean time, the ICC has but to offer extra info relating to the character of the cyberattack, its impression on the ICC’s methods, or whether or not the attackers had been capable of entry or exfiltrate any information or information.
​When requested to offer further particulars relating to this incident, spokesperson Fadi El-Adballah advised BleepingComputer that the ICC can’t present additional particulars or info past what had been shared within the Monday press launch.
September 2023Â cybersecurity incident
That is the second cyberattack focusing on the ICC lately, following the disclosure of one other cybersecurity incident in September 2023.
Roughly one month later, the ICC shared extra details about the September 2023 incident, stating that its methods had been breached for the aim of cyber espionage.
“The proof obtainable to this point signifies a focused and complicated assault with the target of espionage. The assault can due to this fact be interpreted as a severe try to undermine the Court docket’s mandate,” the worldwide tribunal stated.
The courtroom discovered no proof linking the 2023 breach to a particular espionage group, and the impression of the assault stays unclear, with no indication that information entrusted to the ICC was compromised.
The ICC additionally added on the time that the assault got here at a second of “broader and heightened safety considerations for the Court docket,” together with “day by day and chronic makes an attempt to assault and disrupt its methods” and an “nearly profitable try to infiltrate a hostile intelligence officer into the Court docket underneath the guise of an intern.”
Established in 2002, the ICC is a world tribunal based mostly in The Hague, Netherlands, that investigates and prosecutes severe crimes that have an effect on the worldwide neighborhood, akin to battle crimes, genocide, and crimes in opposition to humanity.
For instance, in March 2023, it issued an arrest warrant for Russian President Vladimir Putin associated to crimes related to Russia’s invasion of Ukraine, and one other one in November for Israeli Prime Minister Benjamin Netanyahu for alleged battle crimes in the course of the Palestine battle.
Whereas cloud assaults could also be rising extra subtle, attackers nonetheless succeed with surprisingly easy methods.
Drawing from Wiz’s detections throughout hundreds of organizations, this report reveals 8 key methods utilized by cloud-fluent menace actors.
