Italy says two arrested for defence data theft

Two people have been arrested for stealing defence data from the Italian aerospace and electronics group Leonardo, the interior ministry said on Saturday.

The company has a wide range of activities from naval electronics, network and protection systems, electronic warfare and global communications, according to its website.

Along with European partners, Leonardo is involved in the MBDA group that makes several kinds of missiles, for example.

"At the end of a complex investigation by the Naples prosecutor into a serious computer attack against Leonardo .. a former worker and a company director were arrested," a ministry statement said.

A programme inserted into dozens of work computers via a USB stick at the company's plant in Pomigliano d'Arco, near Naples, allowed hackers to harvest data on projects, including strategic ones, over a two-year period.

The attack was uncovered by a computer crime unit at the prosecutor's office, which issued arrest warrants for illegal access to a computer system, interception of IT communications and illegal use of personal data.

The head of Leonardo's anti-hacking unit was also arrested for obstructing the investigation and providing false information on the nature of the attacks and their effects.

Investigators said that from May 2015 until January 2017, the group's IT system was targeted by an "Advanced persistent threat" led by a worker tasked with keeping the computers secure.

They did not provide extensive details on which systems had been hacked

In January 2017, Leonardo officials uncovered abnormal data traffic from work stations that was generated by so-called malware dubbed "cftmon.exe".

Hackers were able to intercept messages that were typed into the computers and capture images from their screens.

Some of the work stations were used to create strategic products and services for Italy's defence.

A total of 94 computers were compromised, including 48 that belonged to companies working in the aerospace sector.

No less than 10 gigabytes of data, equivalent to around 100,000 files, were lifted from the plant in Pomigliano d'Arco, including information on components of civilian and military aircraft.

Leaonardo said in a statement: "The company, which is obviously the injured party in this affair, has provided maximum cooperation since the beginning and will continue to do so to enable the investigators to clarify the incident, and for its own protection.

"It should be noted that classified or strategic data is processed in segregated areas, without connectivity, and not within the Pomigliano plant.

Related Links
Cyberwar - Internet Security News - Systems and Policy Issues

Tweet

Thanks for being there;
We need your help. The SpaceDaily news network continues to grow but revenues have never been harder to maintain.

With the rise of Ad Blockers, and Facebook - our traditional revenue sources via quality network advertising continues to decline. And unlike so many other news sites, we don't have a paywall - with those annoying usernames and passwords.

Our news coverage takes time and effort to publish 365 days a year.

If you find our news sites informative and useful then please consider becoming a regular supporter or for now make a one off contribution.

SpaceDaily Monthly Supporter
$5+ Billed Monthly

paypal only

SpaceDaily Contributor
$5 Billed Once

credit card or paypal

China slams US national security allegations as 'hodgepodge of lies'
Beijing (AFP) Dec 4, 2020
Beijing on Friday lashed out at a claim by the US intelligence chief that China is the "greatest threat to democracy and freedom worldwide", calling it a "hodgepodge of lies". The war of words comes as relations between the two superpowers have spiralled to their lowest point in decades and as Washington unveiled travel restrictions for members of the Chinese Communist Party. US Director of National Intelligence John Ratcliffe said in a Wall Street Journal opinion piece on Thursday that Chinese ... read more