The dangers of calling out cyber attackers

Governments should be more careful about identifying the would-be culprits in cyberwars as such claims can have unintended consequences and can sometimes harm businesses, says the writer.
3 in 5 SMEs said they had suffered cyber-security breaches that resulted in business disruptions and data leaks over a 12-month period. PHOTO: EPA-EFE
New: Gift this subscriber-only story to your friends and family

The US$100 million (S$135 million) lawsuit that Mondelez, the maker of Oreo and Cadbury chocolate, has brought against Zurich Insurance Group shows that governments should be more careful about identifying the would-be culprits in putative cyberwars: Such claims can have unintended consequences and can sometimes harm businesses.

In June 2017, a malware program dubbed ExPetr or NotPetya wreaked havoc at Danish shipping giant Maersk, US pharmaceutical titan Merck and a number of other big corporations, including Mondelez. NotPetya used an exploit known as EternalBlue, created by the United States National Security Agency and leaked earlier in 2017.

Already a subscriber? 

Read the full story and more at $9.90/month

Get exclusive reports and insights with more than 500 subscriber-only articles every month

Unlock these benefits

  • All subscriber-only content on ST app and straitstimes.com

  • Easy access any time via ST app on 1 mobile device

  • E-paper with 2-week archive so you won't miss out on content that matters to you

Join ST's Telegram channel and get the latest breaking news delivered to you.

A version of this article appeared in the print edition of The Straits Times on January 14, 2019, with the headline The dangers of calling out cyber attackers. Subscribe