CCB revealed new cyberattack that is still investigated

May 26, 2021 07:37 GMT  ·  By

The Belgian Interior Ministry was the victim of a cyberattack in which intruders obtained access to the entire computer system of the ministry. Belgian experts say the attack was most likely launched from China, according to Euractiv

The attack, which was uncovered by technicians at the Centre for Cybersecurity Belgium (CCB) back in March, was initially launched in April 2019, the statement said.

The attack was kept secret to reveal the system's vulnerability only after it was protected.

The Home Office asked the CCB to investigate the network after Microsoft disclosed problems with Exchange, the email system used by many businesses and organizations. According to Belgian media, the hackers gained access to computer systems by exploiting a flaw in Exchange.

Earlier, Microsoft had announced that the Chinese hacker group Hafnium was exploiting a vulnerability in Exchange to penetrate computer networks worldwide.

The cyberattack is still under investigation 

The ministry stated that “The situation is under control: the network has been cleaned up and security has been restored. No further details can be communicated due to the ongoing investigation”.

The ministry's servers are well protected, and hackers did not managed to get the most sensitive data, the ministry's communications director, Olivier Maerens, told RTBF on Tuesday.

The federal prosecutor's office has launched an investigation to find out where the operation came from, what data was hacked, and whether a foreign state was involved.

According to experts cited by RTBF, the goal of the attack was not to disrupt the website or demand ransom. It was more complex and targeted, leading us to believe it was espionage.

Maerens said that immediate measures were taken to prevent the attacker's access and server security was strengthened.

Earlier in May, another massive cyberattack brought down Belgium's Belnet network, which links higher education institutions, universities, research centers, and public administration.