Join our Waitlist for Expert Advice!

China Might Have Gained Access to Indian Govt's Systems Report suggests China might have hacked into Indian Government's official emails

By Rustam Singh

Opinions expressed by Entrepreneur contributors are their own.

You're reading Entrepreneur India, an international franchise of Entrepreneur Media.

Despite Digital India initiative, the focus on providing and increasing national cyber security and promoting safe digital practices have always been at the lowest of the barrel in priorities when it comes to India. The internet is usually the easiest way for any rogue nation or group to attack because of the comfort of remote attacks, and vaguely described agreements that determine what exactly constitutes a state sponsored cyber attack. Recently, reports by a Russian software security group and backed by the famous anti-virus services provider Kaspersky claimed an unknown number of computers of senior government officials at Cabinet Secretariat, ministries of external affairs and IT were compromised by a Chinese cyber hacking group between February and March this year.

The report also claims the hackers were able to send emails from the official email addresses of accounts of the cabinet secretary, which is the nodal agency of the Government of India. "The origin of Danti is unknown, but Kaspersky Lab researchers have reason to suspect that the group is somehow connected to the Nettraveler and DragonOK groups. It is believed that Chinese-speaking hackers are behind these groups," the report said.

The alleged hack was discovered when comments in Chinese languages in various files it obtained from Chinese cyber espionage group Dantis network. Using a very new exploit called CVE-2015-2545 in Microsoft Office in February 2016; several DOCX (Microsoft Office's default extension) files were uploaded to Virus Total. However, Indian government wasn't the only one targeted by the hacking group – it also included the Indian embassy in Hungary, Denmark and Colombia. The email was forged to look exactly like it was sent actually by the senior government officials and shared with official IDs of Indian commission, complete with the official phone number, designation and office address of the official.

In order to gain attention of Indian officials, the email could have been sent to several Indian high power officials. Once the user clicks the DOCx file, the Danti backdoor would be installed in the system oif the official allowing complete access and monitoring of the same. her attack could have possibly allowed sensitive information including state secretes to be stolen away with ease. However, the shocking part is nobody really knows the extent of the damage caused by the exploit already and if it had already gained access to some systems or emails of officials.

Such attacks highlight the repso0nsibility of government officials to be taught on how hackers frequently exploit bugs and how phishing works. Once of the easiest exploits to work, phishing tricks the user to believing the email is sent from someone it's not actually sent from making the user voluntarily give up his/her rights. Priorities should be given to secure official computer systems and proper training be taught to prevent such mi9shaps in the future. Frequent updates to essentials that include fixes for previous security exploits are necessary for a safely working computer.

What do you think of the attacks? Are they a warning signs on how possible attacks in the future may leave us extremely vulnerable or is it another failed attempt by some unknown cyber group not meant to be taken seriously? Let us know in the comments on our official Facebook page Entrepreneur India

Rustam Singh

Sub-Editor- Entrepreneur.com

Tech reporter.

Contact me if you have a truly unique technology related startup looking for a review and coverage, especially a crowd-funded project looking to launch and coverage.

Leadership

4 Bold Leadership Moves Every Successful CEO Uses to Navigate Change

Ready to turn fear into fuel and lead with confidence? In this article, I share how leaving my corporate job without a plan led me to build a thriving business. Learn four bold strategies to embrace uncertainty and turn challenges into opportunities for growth today.

Marketing

5 Ways ChatGPT Will Impact Digital Marketing

ChatGPT is creating ripples across the digital landscape right now. Here are five ways it can benefit your ads, campaigns and marketing strategies.

Science & Technology

How Can Marketers Use ChatGPT? Here Are the Top 11 Uses.

With the recent developments in AI and the popularity of ChatGPT, you may want to integrate AI into your marketing practices. Find out how.

Business News

LinkedIn Is Verifying Users for Free — And Kicking Out Fake Recruiters in the Process

LinkedIn is more than halfway to its goal of verifying 100 million users, and unlike X and Meta, they're not charging for it.

Business News

This Is the Goal-Setting Method Shohei Ohtani Learned in High School That Helped Get Him to the World Series

The MLB superstar's success did not come as a surprise to him. He had a plan.