Grand Theft Cyber Attacks Publishers, Broadcasters

Michael Hedges January 5, 2022 Follow on Twitter

By this point in the digital learning curve most every enterprise is fully engaged in cyber safety measures. Despite the best attention from security experts hackers are still out there. Media organizations are a big target.

A cyberattack just before New Years effectively prevented printing 78 local newspapers of Norwegian publisher Amedia. The target was Amedia Teknologi, the publishers technology subsidiary, and took place in the deep night of December 27 and 28. Advertising and subscription systems were also affected.

“Amedia now works on the basis that customer data can be compromised,” said executive vice president for technology Pal Nedregotten in a published statement (December 28). “If personal information has gone astray, those affected will be informed as soon as possible. This will apply to both customers and employees. In such a case, the Data Inspectorate will be notified of what has happened and how we work with mitigating measures.”

Using backup systems, Amedia was able, gradually, to publish print editions for almost all newspapers by December 31. Online publishing was not affected. Amedia asked subscribers to “pay extra attention to suspicious text messages, telephone inquiries and emails.”

It was a ransomware attack and effectively shutdown a central data processing center, exploiting a “known security hole in (Microsoft) Windows,” Mr. Nedregotten added without offering details, quoted by Digi NO (December 29) "People have been in our systems for several days.” The demand for money was ignored.

This past weekend Portugal’s Impresa Media Group came under a ransomware attack on the websites of newspaper Expresso and broadcaster SIC, reported Reuters (January 3). These hackers were quite bold, revealing their name and demand on the company’s websites. “The data will be leaked if the necessary amount is not paid,” it said. “We have access to the cloud panels. Among other types of devices, the contact for the ransom is below.” The online platforms remain unavailable.

These hackers blasted an email message to Expresso subscribers and took control over social media accounts. At least one email message contained a fake news headline. The newspaper warned subscribers not to open the fake news emails. "In an attack on press freedom in Portugal in the digital age never seen before, the sites of Expresso and SIC, as well as some of their social networks, were this morning the target of a computer attack,” said the publisher’s message.

It was the first cyberattack appearance of this particular group in Portugal, said National Cybersecurity Center (CNCS) coordinator Lino Santos to Observador (January 2), who indicated “a criminal complaint will be filed.” Other Portuguese sources suggested an “international” company in Lisbon was hacked the same day. The hacker group appears to emanate from Latin America, last month hacking Brazil’s Health Ministry and a platform for health managers. It may have hacked US games maker Electronic Arts last May.

“These hackers are extremely good,” said Portuguese data protection specialist Elsa Veloso to Radio Renascenca (January 4). “Large companies must surround themselves with the best professionals and the best techniques.” By Wednesday back-up websites for SIC Notícias and Expresso were “back on the air,” reported SAPO (January 5). The outlets are encouraging users and subscribers to access news through social media platforms.

There was another cyberattack; different only by motivation. On Monday the Jerusalem (Israel) Post and sister publication Maariv websites were hacked, reported Reuters (January 3). It was entirely political rather than a money-grab. Homepage was replaced with a video depicting a descending bullet-shaped object with the caption, in English and Hebrew, “We are close to you where you don’t think about it.”

As the hack occurred simultaneously with the second anniversary of the US drone attack on Iranian Revolutionary Guards Force commander Qasem Soleimani and diplomatic nuclear talks in Vienna all fingers point to Iran. “Any part of Israel’s media, whether it be print, Internet or TV, is part of the media megaphone speaking to the Israeli public,” said cyber intelligence firm Toka president Yaron Rosen, to the Jerusalem Post (January 3). “The use of cyberspace as the preferred battle space is still below the threshold of war.”

See also...

• Hot Topics - Digital Transitions

Media in Spain - Diverse and Challenged – new

Media in Spain is steeped in tradition. yet challenged by diversity. Publishers hold great influence, broadcasters competing. New media has been slow to rise and business models for all are under stress. Rich in language and culture, Spain's media is reaching into the future and finding more than expected. 123 pages, PDF. January 2018

Order here

The Campaign Is On - Elections and Media

Elections campaigns are big media events. Candidates and issues are presented, analyzed and criticized in broadcast and print. Media is now more of a participant in elections than ever. This ftm Knowledge file reports on news coverage, advertising, endorsements and their effect on democracy at work. 84 pages. PDF (September 2017)

Order here

Fake News, Hate Speech and Propaganda

The institutional threat of fake news, hate speech and propaganda is testing the mettle of those who toil in news media. Those three related evils are not new, by any means, but taken together have put the truth and those reporting it on the back foot. Words matter. This ftm Knowledge file explores that light. 48 pages, PDF (March 2017)

Order here

More ftm Knowledge files here

Become an ftm Individual or Corporate Member to order Knowledge Files at no charge. JOIN HERE!