Analysis-Mexico data hack exposes government cybersecurity vulnerability




  • In Business
  • 2022-10-01 00:31:01Z
  • By Reuters
 

By Diego Oré

MEXICO CITY - A major hack into classified government information in Mexico, including thousands of emails from the armed forces, exposed the country's vulnerability to cyberattacks due to under-investment and poor technological preparedness, experts said on Friday.

President Andres Manuel Lopez Obrador confirmed on Friday the Defense Ministry had suffered a hack that revealed details about his heart condition - a form of angina - as well as information on criminal figures, transcripts of communications, and the monitoring of the U.S. ambassador to Mexico.

A group called "Guacamaya" - or "macaw" in Spanish - claimed responsibility for the hack and said on its website it had accessed six terabytes of data.

The size of the hack suggested prior planning, said Francisco Solano, an executive at IT services and consulting firm Logicalis.

"This did not happen by chance," he said.

According to Solano and other analysts consulted by Reuters, the vulnerability exploited by the hackers stemmed from a weakness in a Microsoft server detected last year, known as ProxyShell.

Although solutions to fix the problem were available, the government needed to carry out updates to implement them.

"You have the antidote, but nobody to apply it," Solano said, adding that there appeared to be a lack of resources to resolve the issue.

Microsoft did not immediately respond to an emailed request for comment.

On Friday, at his daily news conference, Lopez Obrador said that hackers had exploited a change in the military's IT systems, without giving further details.

The armed forces did not respond to a request for comment.

Governments worldwide have been increasingly targeted by aggressive cyber crime in recent years and have been forced to increase investment and focus on cybersecurity.

In Latin America, Mexico ranks as the country most targeted by cyberattacks in public and private sectors combined, several studies have shown.

Mexican oil company Pemex, National Lottery and National Transparency Platform have been hit by cyberattacks in recent years.

Although Mexico's government has steadily devoted more resources to cybersecurity, the investment is not enough compared to what is needed to ward off attacks, experts said.

Hackers would have needed up to three days to copy the information, said Adolfo Grego, a forensic specialist, also raising questions over why the government did not act sooner.

(Reporting by Diego Oré; Editing by Muralikumar Anantharaman)

COMMENTS

More Related News

South Korea: Former security adviser arrested over border killing
South Korea: Former security adviser arrested over border killing 'cover-up'

Suh Hoon is accused of covering up events surrounding the killing of an official by North Korea.

Farming: Delay to post-EU subsidy scheme Elms not acceptable say farmers
Farming: Delay to post-EU subsidy scheme Elms not acceptable say farmers

Farmers are waiting for clarity over what post-EU support they will get to improve the environment.

Mexico, U.S. plan pitch by early 2023 to lure firms from abroad
Mexico, U.S. plan pitch by early 2023 to lure firms from abroad

Mexican Economy Minister Raquel Buenrostro and U.S. Secretary of Commerce Gina Raimondo on Friday agreed to set out a plan by early 2023 for the relocation...

In Mexico, lack of resources aggravates impunity in gender crimes - group
In Mexico, lack of resources aggravates impunity in gender crimes - group
  • US
  • 2022-12-02 03:31:13Z

Less than half of femicides in Mexico result in convictions, research group Impunidad Cero said on Thursday, pointing to a lack of resources directed at...

Mexico to hike minimum wage by 20% in 2023, raising inflation worries
Mexico to hike minimum wage by 20% in 2023, raising inflation worries

Mexico will raise the minimum wage by 20% next year after employers, labor representatives and the government reached an agreement, officials said on...

Leave a Comment

Your email address will not be published. Required fields are marked with *

Cancel reply

Comments

  • Smm Panel
    (2022-10-01 06:39:20Z)

    smmworld happy to learn that this post is really useful to me because it has a wealth of knowledge.

    REPLY

Top News: Business