On Monday, the Worldwide Legal Court docket (ICC) introduced that it is investigating a brand new “refined” cyberattack that focused its methods final week.
In an announcement yesterday, the ICC revealed that it had contained a “refined and focused” cybersecurity incident, which was found by methods in place to detect cyberattacks focusing on its methods.
“This incident, the second of this kind towards the ICC in recent times, was swiftly found, confirmed and contained, via the Court docket’s alert and response mechanisms. A Court docket-wide impression evaluation is being carried out, and steps are already being taken to mitigate any results of the incident,” the ICC mentioned.
“The Court docket considers it important to tell the general public and its States Events about such incidents in addition to efforts to deal with them, and requires continued help within the face of such challenges.”
In the intervening time, the ICC has but to supply extra info relating to the character of the cyberattack, its impression on the ICC’s methods, or whether or not the attackers have been in a position to entry or exfiltrate any knowledge or recordsdata.
When requested to supply extra particulars relating to this incident, spokesperson Fadi El-Adballah advised BleepingComputer that the ICC can not present additional particulars or info past what had been shared within the Monday press launch.
September 2023 cybersecurity incident
That is the second cyberattack focusing on the ICC in recent times, following the disclosure of one other cybersecurity incident in September 2023.
Roughly one month later, the ICC shared extra details about the September 2023 incident, stating that its methods had been breached for the aim of cyber espionage.
“The proof obtainable to date signifies a focused and complicated assault with the target of espionage. The assault can due to this fact be interpreted as a critical try and undermine the Court docket’s mandate,” the worldwide tribunal mentioned.
The court docket discovered no proof linking the 2023 breach to a selected espionage group, and the impression of the assault stays unclear, with no indication that knowledge entrusted to the ICC was compromised.
The ICC additionally added on the time that the assault got here at a second of “broader and heightened safety issues for the Court docket,” together with “every day and chronic makes an attempt to assault and disrupt its methods” and an “nearly profitable try and infiltrate a hostile intelligence officer into the Court docket below the guise of an intern.”
Established in 2002, the ICC is a global tribunal based mostly in The Hague, Netherlands, that investigates and prosecutes critical crimes that have an effect on the worldwide neighborhood, corresponding to struggle crimes, genocide, and crimes towards humanity.
For instance, in March 2023, it issued an arrest warrant for Russian President Vladimir Putin associated to crimes related to Russia’s invasion of Ukraine, and one other one in November for Israeli Prime Minister Benjamin Netanyahu for alleged struggle crimes throughout the Palestine battle.
Whereas cloud assaults could also be rising extra refined, attackers nonetheless succeed with surprisingly easy strategies.
Drawing from Wiz’s detections throughout 1000’s of organizations, this report reveals 8 key strategies utilized by cloud-fluent risk actors.