In this year’s report, Nkom describes a changed threat picture. Relations with Russia have worsened, and China is looking for information in industry and politics. The security policy situation increases the risk for internet and telephony providers. – The consequences of the types of actions that can be directed at the sector can be very large, warns Acting Director of Nkom, John-Eivind Velure. – Norway is a very digitized country, which is completely dependent on internet and mobile services to work for the most part, or preferably all the time, he explains. More sabotage The analysis states that there is a growing threat from insider attacks that can plant malware and share sensitive information. Nkom considers providers of electronic communication and data center operators as likely targets. FIBER CABLE CUT: This is what the researchers at the Norwegian Defense Research Institute encountered when they were to check the jamming equipment on the mountain above Bleik in Andøy. Photo: Anders Rødningsby / FFI The report mentions several acts of sabotage this year. In December last year, Ukraine’s largest telecommunications operator KievStar was hacked. The attack led to 24 million subscribers being without mobile and internet for one week. Ukraine’s cyber spy chief Ilya Vitjuk says Russian insiders were behind it. – If an insider can arrange for malware to be installed in your systems, then you have a big challenge, says Erik Haugland, head of security at Ice, which operates one of three mobile networks in Norway. Erik Haugland, head of security at Ice. Photo: Martin Gundersen / news With over 20 years’ experience from the Police’s security service, he is familiar with the threat from insiders, and says it is important to have mechanisms in place. – You must have a thorough recruitment process, especially linked to the positions and functions that will have this type of access. Then it is important to have authorization separations, that is to say that you must only give access or access to the systems you have a strictly official need for access to, he elaborates. Tips for mobile users It is not only other states that are a threat to electronic communication. In Nkom’s analysis, it is also pointed out that the weather will become both wilder and wetter, and that it is difficult to predict where extreme weather will hit. John-Eivind Velure therefore asks us to think about whether we could manage without our mobile phones for a few hours. – If you can’t, then you have the option of, for example, buying access from two independent operators. This makes you more resilient if one falls out. Main findings from the report: Changed threat picture: Increased risk for ecom providers and data center operators due to the security policy situation. Nkom experiences a large variation between ekom providers in how prepared they are for crises in the upper range. Public sector: Must set requirements for security and robustness when procuring ecom networks and services. Insider threat in Norwegian businesses: Increasing threat from insider attacks that can plant malware and share sensitive information. Nkom considers e-com providers and data center operators to be likely targets. Sabotage of Norwegian infrastructure on land and at sea: The risk level for sabotage against socially critical infrastructure has increased. Sabotage against fiber infrastructure in Norway has been observed in 2024. GNSS disturbances in Finnmark (satellite-based navigation systems/GPS): Increasing problem globally, especially near the border with Russia, which particularly affects the aviation industry. The need for a long-term plan for electronic communication: Public-private cooperation between authorities, e-com providers and data center operators is necessary to ensure a robust digital infrastructure for crisis and war. Published 15.10.2024, at 05.59
ttn-69
Warns against attacks on the telecommunications network – news Norway – Overview of news from various parts of the country
