[ad_1]
Canada’s cybersecurity unit is urging Canadian users of SolarWinds’ Orion software to investigate whether their systems have been compromised in a “far reaching” hack revealed earlier this month.
The Canadian Centre for Cyber Security said in an alert released Thursday “It is believed that government agencies and a variety of organizations in Canada and abroad may be affected” by the hack, which was “carried out by a highly sophisticated threat actor.”
The centre, which is a unit of the Communications Security Establishment, one of Canada’s key security and intelligence organizations, did not specify which organizations or government entities may have been affected by the hack.
Last week, Shared Services Canada, which manages much of the government’s IT infrastructure, told CBC News it had no indication its infrastructure had been compromised. The Department of National Defence said it did not use the affected platform.
LISTEN | Cybersecurity expert on wide-ranging hack:
As It Happens6:47Hacks against U.S. agencies could be ‘most successful cyber-espionage campaign’ ever, says expert
For months, the U.S. government has been under attack by a foreign power, and no one knows just how much damage has been done. It’s unclear at this point how many companies and agencies are affected, or what information has been stolen, but Alex Stamos, director of the Stanford Internet Observatory and former chief security officer at Facebook, says this could turn out to be “the most successful cyber-espionage campaign in history.” 6:47
Neither Shares Services nor the CSE responded to a request for comment Thursday.
In its alert, the Canadian Centre for Cyber Security said it “has been working within the community to identify affected systems and notified Canadian system owners where possible. The impact on these compromised systems remains unidentified, but analysis is ongoing.”
U.S. authorities, including Secretary of State Mike Pompeo have blamed the attack, in which several U.S. government departments and agencies were breached, on Russian actors. The Russian government denies involvement, and President Donald Trump contradicted Pompeo late last week by suggesting China may be culpable.
The attack is believed to have started in the spring, and used a network monitoring software platform called Orion, created by the firm SolarWinds. By compromising that platform, the attackers were able to insert malware into the systems of SolarWinds’ clients. SolarWinds has said approximately 18,000 clients may be affected globally.
“The SolarWinds Orion vulnerability and associated compromises are far reaching, and it is important that organizations perform thorough analysis of their networks,” to ensure they are not compromised, the CSE said in its alert.
The alert goes on to outline technical details of how to identify and mitigate systems which may be compromised by the hack.
On Wednesday, Cybersecurity and Infrastructure Security Agency, the U.S. cybersecurity agency, said the hack was having an impact on state and local governments.
[ad_2]
Source link
