Cyberthreats: hackers have their sights on municipalities

Ransomware is made up of two words: ransom (never a good sign), and “ware,” for software (malicious, obviously). This pesky tool skillfully orchestrates a virtual hostage situation for your business. It encrypts the data on exposed servers, paralyzing the computer and telephone systems, making it impossible to consult employee records and to use email accounts, among other things. Citizens are also affected, losing access to the online portal for requesting a permit or reserving a library book, for example. Given its significant impact on a business’s capacity to operate normally, ransomware is the cybercrime scourge of the hour.

The wrongdoers behind this tool are therefore affecting the victimized organization’s operations. They also sometimes threaten to share the information they have collected. We therefore have a double-extorsion: they demand a significant sum of money not to share the personal information and restore the stolen data.

Once the ransom has been paid—in bitcoin, obviously—the fraudsters may or may not send a key releasing the computers from the malicious code.

What factors contribute to the proliferation of these dangers for Québec and Canadian municipalities? Here are a few.

The technological development of cities

It’s a fact: the smart city concept is getting more and more attention. Its benefits—optimized resources, improved quality of life for citizens, and adaptations to climate change, for instance—are enticing to municipalities, which are considering embarking on this promising revolution. However, the deployment of Internet of Things (IoT) devices is a must when transitioning to a smart city. And the higher the number of such connected sensors, the greater the potential exposure to cyberthreats.

These smart systems produce large amounts of data that may be of interest to ill-intentioned organizations. The close ties municipalities forge with their citizens can also whet their appetite: the exchange of personal information or the deployment of a virtual one-stop shop, for example, are entryways for cybercriminals. One thing is certain, the multiplication of online services increases the risks of cyberattacks.

The popularity of hybrid work

The COVID-19 pandemic turned the whole working world upside-down. Organizations were left with no other choice but to transition into a modern working environment. Overnight, employees were faced with the requirement of working from home. The popularity of the hybrid work method has not waned since…

Given the requirements of working remotely, certain information security facets have become indispensable: the management of identities, the management of devices, productivity, collaboration, and protection of information. Delaying adjusting to the new work context leaves the door open to hackers to deploy their harmful tactics. Municipalities sometimes want to outsource these tasks. But beware: not all managed service providers have the expertise required to oversee information technology (IT) and security.

The high turnover

It’s the very essence of ransomware or phishing: an employee unwittingly opens an infected link or file … and a bunch of problems ensue! It is therefore crucial for municipalities to pay particular attention to the protection of their network, as well as to cybersecurity awareness and training.

In fact, the most common form of phishing these days concerns fictitious job offers. This tactic is gaining popularity in the current context: the lack of workforce combined with enticing salaries is one of the factors facilitating hackers’ handiwork. The victim, thinking they are applying to another municipality—it does happen!—is compromising their own personal information, and the integrity of their current employer’s network.

And while the labour shortage is affecting several areas of activity, certain organizations are finding it difficult to recruit and retain qualified employees. There is a high turnover rate as a result. Recurring information sessions could be the solution to countering targeted attacks by hackers.

An organization that falls victim to a cyberattack needs to take major steps to recover. The potential costs associated with ransomware are multiple, starting with, of course, the ransom itself. Given the extensiveness of their operations, municipalities that fall victim to a cyberattack could end up spending a considerable amount of time repairing the damage.

“Cyber security reporting indicates that ransom payments have increased since 2020, likely driven in part by increasingly significant demands against large enterprises,” reveals the Canadian Centre for Cyber Security. According to Coveware, the data aggregator on cyberattacks, the average payment associated with ransomware, in Canadian dollars, for the second quarter of 2022, was $298,755. One year later, the average ransom stood at $780,144. There’s reason to question the longevity of certain SMEs and to push cities to assess their ability to respond to such an attack now.

The value of the ransom to be paid represents just a portion of the total cost for a target organization. Disbursements are also to be expected for the loss in your work teams’ productivity, for repairing and updating the compromised systems, and for rebuilding your undoubtedly tarnished reputation. Oftentimes, a public relations and investigation firm is involved in the crisis management process.

And that’s in addition to the cost related to incomplete data: a study on ransomware conducted by TELUS with 450 Canadian businesses revealed that just 42% of businesses that pay the ransom succeed in recovering all the data that was taken hostage. It just goes to show that it’s better to be safe than sorry.

A cyberthreat remains a risk not only to the critical infrastructure of municipalities, but also for the safety and wellbeing of your citizens. Take action before one of your computers surprises you with a ransom demand.

First solution: Consider consolidating the business relation with the telecommunications service provider you already know and trust. There are several benefits to grouping all your services under the same roof. Contact us today to stop dishonesty in its tracks and stay many steps ahead of computer hackers.