Robert M. Lee, CEO of cybersecurity firm Dragos, was targeted by an organized criminal hacking group who had infiltrated Dragos’s employee network. When Lee refused to pay a ransom for the company’s proprietary data, the hackers threatened his family, revealing personal details about his son. Lee stated that such threats take a different, more serious dimension when they involve the safety of one’s family.
This trend of online threats becoming real-world dangers is increasingly reported by western cybersecurity professionals. Some computer engineers, called in to counter hacking groups, find themselves targeted. The hacking group that threatened Lee was known for “swatting,” a malicious tactic of falsely reporting armed attacks to prompt a police SWAT team response at a victim’s home. Lee was advised to lie down in such situations.
The threats vary widely, such as a Ukrainian hacker mailing heroin to cybersecurity analyst Brian Krebs’s home or hacking victims being told to transfer money to cybersecurity professionals’ bank accounts to frame them. Charles Carmakal, CTO of Mandiant Consulting, expressed concern about the security of organizations and individuals involved in the field.
Carmakal points out that these threats often come from criminals, not governments, who tend to move on to the next operation when thwarted. He described the hackers as young individuals without formal rules of engagement, who cause significant pain and make it feel very real.
Professionals outside the US report even more tangible threats, including house break-ins, bank account hacks, and doctored documents leaked online. Cybersecurity analysts try to remain professional in their reports and protect junior employees. However, the deep involvement of western companies in Ukraine’s cyber defense, a country facing sophisticated cyberattacks, exacerbates the situation. One researcher believes it will only get worse, with the potential for someone to get killed.
Source: The Financial Times
To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net or you can try your self using check.website.