Cybercriminalité, des attaques bien réelles | ARTE

Introduction

The video introduces the topic of hacking and cybercrime, highlighting the ease with which hackers can access sensitive information.

Hacking: An Introduction

• Hacking is a serious issue that affects individuals, businesses, and even governments.

• Hackers have the ability to access sensitive information and cause significant damage.

• The video highlights the ease with which hackers can obtain information and emphasizes the importance of cybersecurity.

Types of Cybercrime

This section discusses different types of cybercrime that hackers engage in.

Different Types of Cybercrime

• Hackers can use their skills to humiliate someone, sabotage a competitor, or steal confidential information.

• The video mentions an incident where hackers obtained data from over 1500 German politicians and published it online.

• There are professional services available on both the Darknet and clear web for those who want to hire a hacker or purchase stolen data.

Young Hackers

This section focuses on young hackers who engage in cybercrime.

Young Hackers

• The video highlights how young people are getting involved in hacking activities.

• A teenager was arrested for obtaining passwords for 12 billion internet accounts through a website he subscribed to for just €2 per day.

• Law enforcement agencies are closely monitoring this trend.

Professionalization of Hacking Services

This section discusses how hacking has become more professionalized over time.

Professionalization of Hacking Services

• There has been a rise in professional hacking services that offer specialized skills such as intrusion testing or password cracking.

• These services are offered openly on forums frequented by cybercriminals.

• Some hackers even advertise job openings online.

Vulnerabilities in Cybersecurity

This section discusses the vulnerabilities in cybersecurity and how hackers exploit them.

Vulnerabilities in Cybersecurity

• Hackers can gain access to a system through various means, such as exploiting weak passwords or clicking on infected email attachments.

• The video compares a computer system to a house, with hardware being the foundation, software being the walls and roof, and cryptography being the locks.

• Users are often the weakest link in cybersecurity since they can make mistakes that allow hackers to gain access.

User Error

This section focuses on how user error is often responsible for cyberattacks.

User Error

• Most cyberattacks are caused by user error, such as using weak passwords or failing to update software.

• Once hackers gain access to a system, they can move deeper into it and obtain more sensitive information.

• The video emphasizes that hackers leave little trace of their activities once they have gained access.

Conclusion

The video concludes by emphasizing the importance of cybersecurity and how everyone needs to take responsibility for protecting their data.

Importance of Cybersecurity

• Cybercrime is a serious issue that affects everyone.

• It is important for individuals and organizations to take steps to protect themselves from cyberattacks.

• The video emphasizes that cybersecurity is everyone's responsibility.

Email Scams and Cybersecurity

The transcript discusses the prevalence of email scams and cyber attacks, which can lead to significant financial losses for individuals and companies. Hackers are becoming increasingly sophisticated in their methods, using fake websites that look like legitimate ones to steal login information. Companies are also at risk, with cyber attacks costing more than natural disasters.

Email Scams

• Hackers use fake websites that resemble legitimate ones to steal login information.

• One in three French people have fallen victim to an intrusion attack.

• AI technology is being used by hackers to create convincing emails that trick users into clicking on malicious links.

Cybersecurity for Companies

• Cyber attacks cost companies more than natural disasters.

• A company based in Nancy has developed a suite of tools called SCUBA that uses AI technology to identify vulnerabilities in a system and prioritize them based on risk level.

• Small devices such as cameras can be dangerous as they can serve as entry points for malware capable of paralyzing entire systems.

Real-Life Consequences of Cyber Attacks

The transcript discusses real-life consequences of cyber attacks, including power outages and internet disruptions affecting millions of people.

Examples of Cyber Attacks

• In Finland, an attack caused a heating outage during winter.

• Nearly one million Deutsche Telecom customers were left without internet or phone service for several hours due to an attack.

• The site of the European Parliament in Strasbourg was attacked after a resolution against Russia was passed.

• Estonia experienced a series of anonymous cyber attacks that paralyzed the country for three days.

The Vulnerability of Everyday Objects

In this section, the speaker discusses how everyday objects that are connected to the internet can be hacked and used as tools for cyberattacks.

Everyday Objects as Tools for Cyberattacks

• Devices such as smart speakers, ovens, and refrigerators can be hacked and used as tools for cyberattacks.

• Home automation systems are vulnerable to attacks because they are essentially small computer systems that can be easily compromised.

• Researchers have simulated an attack on a production line using connected cameras, which were able to paralyze the entire system.

• A simulation showed how a simple camera hack could lead to the takeover of an entire system.

The Constant Battle Between Attackers and Defenders

In this section, the speaker discusses how attackers constantly adapt their methods while defenders try to find ways to protect against them.

The Cat-and-Mouse Game of Cybersecurity

• Attackers constantly adapt their methods, forcing defenders to find new ways to protect against them.

• Reducing vulnerabilities in systems is crucial in preventing attacks from happening.

The Difficulty of Protecting Against Cyberattacks

In this section, the speaker discusses how difficult it is to protect against cyberattacks and gives examples of institutions that have been affected by them.

Protecting Against Cyberattacks

• It has been difficult for German law enforcement agencies to prevent cyberattacks, which have been happening for decades.

• German municipalities are vulnerable to cyberattacks due to the digitization of administrative data and lack of resources dedicated to cybersecurity.

• A magazine investigation found that many German public institutions were vulnerable to cyberattacks due to a known security flaw that had not been addressed.

Cybersecurity and Critical Infrastructure

The transcript discusses the vulnerability of critical infrastructure to cyber attacks, highlighting the need for effective cybersecurity measures.

Vulnerabilities in Industrial Control Systems

• Attackers can exploit vulnerabilities in industrial control systems that are not protected by passwords or have outdated software updates.

• Cyber criminals can take control of hundreds of computers across Germany, causing significant damage to critical infrastructure such as hospitals and water treatment plants.

• Hackers can cause serious damage by manipulating specific processes related to temperature control or ventilation systems.

Risks to Society

• Cyber attacks on vulnerable elements of critical infrastructure such as ventilation systems could lead to widespread disruption and even days or weeks of downtime.

• Disruptions in communication networks, banking systems, and emergency services could have severe consequences for society as a whole.

Challenges in Securing Critical Infrastructure

• Experts face challenges in identifying vulnerabilities within complex information systems that are constantly evolving.

• Even with strict regulations requiring emergency plans and automatic attack detection, critical infrastructure remains vulnerable due to the constant emergence of new malware variants and security flaws.

Overall, the transcript emphasizes the importance of implementing effective cybersecurity measures to protect against cyber attacks on critical infrastructure.

The Difficulty of Cybersecurity

In this section, the speaker discusses the increasing difficulty of cybersecurity due to the growing number of software and hardware systems. It is challenging for defenders to maintain control over their systems while attackers only need one successful attempt to penetrate a system.

Cybersecurity Challenges

• The number of software and hardware systems continues to increase, making it difficult for companies to keep track.

• Attackers only need one successful attempt to penetrate a system, while defenders must maintain control 100% of the time.

• Companies often prioritize functionality over security, leaving most systems vulnerable to attack.

Examples of Successful Cyberattacks

This section provides examples of successful cyberattacks that have occurred in recent years.

German Parliament Hack

• In May 2015, hackers successfully penetrated the German Parliament's network by sending an email with a malicious link.

• The hackers were able to access sensitive documents and even an office computer belonging to Chancellor Angela Merkel.

• Despite suspicions pointing towards Russian hacking group Fancy Bear (APT28), no legal action was taken due to lack of evidence.

Hillary Clinton Email Hack

• During the 2016 US presidential election campaign, Hillary Clinton's email account was hacked and several messages were made public.

• Suspicions once again pointed towards Fancy Bear (APT28), but no legal action was taken due to lack of evidence.

OPCW Hack

• In April 2018, four Russian hackers attempted to steal information from the Organization for the Prohibition of Chemical Weapons (OPCW) in the Netherlands.

• The hackers were caught and their equipment was seized, revealing ties to Fancy Bear (APT28) and Russian intelligence.

Investigating Cyberattacks

This section discusses the challenges of investigating cyberattacks and identifying the perpetrators.

Difficulty of Identifying Hackers

• Identifying cybercriminals is a difficult task that requires specialized skills in digital forensics.

• Elements such as file attachment location or coding language can provide clues about the attacker's location or identity.

• However, attackers may use tactics such as time zone manipulation or data erasure to cover their tracks.

Cyberwarfare: Are We Ready?

In this section, the speaker discusses cyberattacks and their origins. He also talks about the concept of cyberwarfare and how it has been used in the media.

Origins of Cyberattacks

• Most major cyberattacks between 2000 and 2018 were launched from China, followed by Russia and then the United States.

Understanding Cyberwarfare

• The term "cyberwarfare" is often used to describe a range of attacks, but most attacks fall short of being considered an act of war because they do not involve physical force.

• Unlike traditional weapons like bombs or tanks, cyber weapons do not destroy anything physically visible. Their actions remain invisible for a long time.

• No state has officially declared war through a cyberattack as there is no clear definition of what constitutes an act of war in cyberspace.

• States are hesitant to declare acts committed in cyberspace as acts of war so as not to set precedents that could be used against them in future conflicts.

Role of Cyberweapons in Modern Warfare

• While many believe that the next war will be fought digitally, digital warfare plays only a secondary role in traditional armed conflict.

• Digital equipment does not pose any risks associated with armed conflict but can be vulnerable to manipulation by foreign powers if security vulnerabilities are built into them during production.

• The US has banned Huawei equipment due to concerns over potential manipulation by China, which could allow them access to critical infrastructure such as 5G networks.

Vulnerabilities in Microprocessors

• Researchers are investigating whether microprocessors, which are present in most modern devices, can be manipulated to create vulnerabilities.

• If vulnerabilities were found, it would mean that devices could be hacked from the inside rather than through external malware.

• While there is little documented evidence of such manipulations, they are technically feasible and could open up infinite possibilities for cybercriminals.

Understanding Processor Security

In this section, the speaker discusses how difficult it can be to detect malicious activity at the nanometer level of processors. The importance of understanding hardware manipulation is emphasized.

Processor Design and Manipulation

• It can be challenging to detect malicious activity in processors due to their small size.

• Processors operate on a nanometer scale, making them difficult to manipulate and analyze.

• Malicious activity at the nanometer level can be hard to detect and prove.

• Hardware manipulation is dangerous because chip manufacturers keep their plans secret, making it challenging for researchers to identify potential threats.

Training for Processor Design

• Researchers modify circuit boards to train themselves in analyzing processor structures element by element.

• Europe is developing its own microprocessors as China and Taiwan's near-monopoly on the market poses security risks.

Cybersecurity Threats

• Chinese equipment is banned from European infrastructure due to cybersecurity concerns.

• Trust is essential in cybersecurity, but erosion of trust has led people to fear cyberattacks on critical infrastructure.

• While hackers attempt thousands of attacks per minute, specialists are able to prevent most of them.

Responsibility for Cybersecurity

• Operators and manufacturers must ensure that systems meet security standards while governments must provide legal frameworks for cybersecurity.

• France's ANSSI and Germany's BSI are examples of government agencies dedicated to monitoring cybersecurity threats.

Cybersecurity in Europe

The speaker discusses how different countries in Europe collaborate to monitor cyber threats and share information. They also discuss the role of mobile intervention teams in responding to attacks.

Collaboration between European Countries

• Each country has a center for monitoring cyber threats, and they collaborate with each other through instant messaging groups.

• Experts share observations and effective countermeasures with each other.

• There are also projects that involve collaboration between police forces across Europe.

Mobile Intervention Teams

• The BSI has a team of experts who provide on-site support to victims of cyber attacks.

• They begin by backing up all data before analyzing the attack and determining how the attackers gained access.

• Once the analysis is complete, they work with employees to restore normal functioning, which can take several months depending on the severity of the attack.

Cybersecurity in Germany and France

The speakers discuss how cybersecurity is handled in Germany and France, including coordination challenges and initiatives aimed at improving research.

Cybersecurity in Germany

• Cybersecurity is managed by a network of actors at federal, regional, and communal levels.

• Coordination can be challenging due to the variety of expertise involved.

• The German Ministry of Interior supports greater centralization of cybersecurity similar to France's model.

Cybersecurity in France

• A new initiative called "Cybercampus" aims to bring together all actors involved in cybersecurity research under one roof.

• This includes state organizations like ANSSI as well as private companies.

International Coalition Against Malware

An international coalition prepares to take down a botnet responsible for numerous attacks worldwide.

Targeting a Botnet

• An international coalition including France and Germany targets a botnet known as "Andromeda."

• The botnet is responsible for a large number of attacks in Germany and other Western countries.

Identifying the Culprit

• Investigators work to identify the administrator of the criminal network, who is located in Ukraine.

• Once identified, they introduce a program that redirects connections to their own server, effectively taking control of the network.

Cybersecurity and Quantum Computing

In this section, the speaker discusses the challenges of investigating cybercrime and the potential threat that quantum computing poses to current encryption methods.

Investigating Cybercrime

• The clearance rate for cybercrime is around 30%, much lower than other crimes due to the difficulty of investigating in digital spaces.

Threat of Quantum Computing

• The development of quantum computers poses a threat to current encryption methods as they can quickly break through them.

• Researchers are working on developing post-quantum cryptography to protect against this threat.

• The Kyber method developed by Peters Fab and his team is one of four finalists in an international competition for post-quantum cryptography.

• Post-quantum cryptography must be based on mathematical problems that quantum computers cannot easily solve.

Encryption Methods

• Asymmetric encryption algorithms are commonly used in cryptography, which rely on mathematical problems that are easy to perform in one direction but difficult to reverse.

• Better Schwab and Aikkiels visit their colleagues in Zurich who specialize in encryption techniques to combat the threat posed by quantum computing.

Overall, this section highlights the challenges faced by investigators when dealing with cybercrime and how quantum computing poses a significant threat to current encryption methods, leading researchers to develop new post-quantum cryptographic methods such as Kyber.

Cryptography and Cybersecurity

In this section, the speaker discusses the importance of cryptography in our daily lives and how it is essential for cybersecurity. The speaker also provides tips on how to protect oneself from cyber threats.

Importance of Cryptography

• Cryptography is essential for secure communication in our hyper-connected world.

• New encryption methods are being developed to replace current ones, which will be used by companies in the next two years.

Tips for Cybersecurity

• Choose strong passwords and use a different one for each application.

• Never click on suspicious links or open email attachments from unknown senders.

• Regularly backup data to prevent loss in case of a cyber attack.

• Install updates as soon as possible to fix security vulnerabilities.

User Responsibility

• Users have a responsibility to protect their devices and accounts by following best practices.

• Applying these four simple steps can provide users with a high degree of protection against cyber threats.

Overall, this section emphasizes the importance of cryptography in ensuring cybersecurity and provides practical tips for individuals to protect themselves from cyber attacks.