Big foreign cyber attack targets Italian certified email accounts

Certified emails guarantee the validity of a sender’s identity


Reuters November 20, 2018
A hacker tries to access and alter data from an electronic poll book in a Voting Machine Hacking Village during the Def Con hacker convention in Las Vegas, Nevada, US on July 29, 2017. PHOTO: REUTERS

ROME: Unknown hackers gained access to thousands of Italian certified email accounts, including those of magistrates and security officials, in a major cyber attack earlier this month, a senior official said on Monday.

Certified emails guarantee the validity of a sender’s identity, as well as the date and time of sending and receiving the email, giving them a clear legal status.

Cybercrime: Suspect arrested for blackmail

“This was the worst attack we have had since January this year and it has had important repercussions, but ... the situation is under control,” said Roberto Baldoni, who is in charge of state cybersecurity.

That attack was launched on November 12 and targeted a server near Rome which handles certified email accounts for the public administration.

Hackers could have accessed data from around 500,000 accounts, including those of some 9,000 magistrates as well as members of a top inter-governmental security agency.

It was not clear if the accounts of any ministers, spy chiefs or military bigwigs had been breached.

Of consent and copyrights: Women lodge 90% complaints in FIA Cybercrime Circle

“The only thing we know for sure is that this attack was not launched from Italy,” Baldoni told a news conference.

As a result of the cyber assault, the IT system used by Italy’s appeals courts was suspended and Baldoni urged Italians with certified email accounts to change their passwords immediately.

“It was a serious attack, even if, at first sight, it didn’t seem too refined from a technical perspective,” Baldoni said.

COMMENTS

Replying to X

Comments are moderated and generally will be posted if they are on-topic and not abusive.

For more information, please see our Comments FAQ