Warning Over Cyber Attacks Targeting Transport Firms

Global cybersecurity firm Smarttech247 is raising the alarm about a surge in Distributed Denial of Service (DDOS) attacks attempting to target Irish transport companies over the past week. Experts believe the current spate of incidents is linked to a pro-Russian hacker group known as ‘NoName057(16)’.

Organisations who fall victim to these attacks often find their websites or networks flooded with extremely high volumes of traffic, making it impossible for their service to function properly. The bogus traffic is also controlled from multiple locations, making it difficult and time-consuming to halt the disruption.

CEO of Smarttech247 Raluca Seceanu says “These threat actors have been actively targeting providers in this country as well as Norway, Sweden, Germany and Estonia in recent weeks. In a different approach to what many might expect, they’re not interested in stealing data – they simply want to cause maximum disruption to their victims’ businesses”.

Smarttech247 is reiterating the important steps companies must take to protect their networks from DDOS attacks:

—  Ensure that your main DNS server is properly configured and up to date with the latest recommendations from your provider

—  Have robust Access Control Lists (ACLs) and firewall filters in order to stop DDoS attacks

—  Enhance cybersecurity awareness training particularly around phishing and other social engineering attacks

—  Have an up to date Incident Response Plan

—  Maintain a strong Threat and Vulnerability program and scan for unpatched systems

—  Enable multi-factor authentication across entire systems

—  Enforce strong password protocols for all users

—  Monitor your systems 24/7 for anomalous behaviour

Raluca Saceanu says the impact of a DDOS attack can be very serious: “When you rely on your website or emails for much of your business, having customers locked out for days can be devastating. Transport companies are coming into an extremely busy time of the year and it’s worth being proactive on your approach to cybersecurity to reduce the risk of this kind of incident happening”.