French authorities are investigating a suspected cyberattack plot targeting an international passenger ferry with the potential for remote control. The investigation was prompted by intelligence shared by Italian authorities.
Suspected Plot and Arrests
France’s counterespionage agency is currently investigating the incident. A Latvian crew member is in custody, facing charges related to acting for an unidentified foreign power, according to French officials. Police initially arrested two crew members – a Latvian and a Bulgarian – but the Bulgarian was released after questioning.
The ferry, docked in the French Mediterranean port of Sète, was found to have software – sometimes used by cybercriminals – potentially infecting its computer systems. This software, known as RAT, allows for remote control of computer systems.
Potential Implications
Interior Minister Laurent Nunez described the situation as “a very serious affair,” stating that “individuals tried to gain access to a ship’s data-processing system.” When asked about a potential hijacking, Nunez stated, “We don’t know.” Investigators are currently following leads suggesting “foreign interference.”
France and its allies have alleged that Russia is engaged in “hybrid warfare,” employing tactics like cyberattacks that are often difficult to attribute directly. Nunez noted that, “at the moment, foreign interference very often comes from same [the] country.”
Search raids have been conducted in Latvia, though Latvian state police have declined to comment. The ferry has since resumed operation after undergoing security checks on its computer systems.
Frequently Asked Questions
What type of software was found on the ferry?
The software identified was a so-called RAT – Remote Access Trojan – which allows users to control computer systems remotely.
Was the ferry successfully hijacked?
Authorities have stated they do not know if the intention was to hijack the vessel. The investigation is ongoing.
What is the current status of the investigation?
A Latvian national is in custody facing preliminary charges of criminal conspiracy and hacking-related offences to serve the interests of an unnamed foreign power. Investigations are also underway in Latvia.
As investigations continue, what measures might be taken to bolster the cybersecurity of international transport systems?
Worth a look