Germany’s top military Cyber and Information Domain Service (CIR) leader recently encountered phishing emails attempting to deceive him into believing his antivirus protection needed renewal. Vice-Admiral Thomas Daum disclosed deleting three such emails from his personal account, emphasizing the importance of caution in such situations. Daum, visiting Ottawa, highlighted the pervasive threat posed by cyber adversaries like Russia, China, Iran, and North Korea.
A German report from March detailed a Russian state hacking incident involving a targeted phishing effort on the Signal messenger app. This campaign successfully compromised the account of a former German foreign intelligence vice president, leading to the distribution of malware within European defense and security circles. As Germany and Canada undergo significant defense expansions, Daum noted an uptick in supply chain attacks on German defense contractors.
In a separate incident, one of Germany’s prominent defense contractors, Rheinmetall, fell victim to a ransomware attack orchestrated by the Russian-speaking Black Basta gang. The attack impacted Rheinmetall’s civilian automotive unit, resulting in substantial financial losses. Daum stressed the necessity for industry vigilance and swift response to cyber threats to maintain operational continuity.
Furthermore, recent espionage activities targeting a Bavarian drone manufacturer and military maintenance logistics provider HIL underscored the persistent cyber risks faced by German and Canadian industries. Daum urged the defense sector to bolster cybersecurity defenses and promptly address any security breaches to prevent service disruptions. Recognizing the broader impact of cyber threats, Daum emphasized the importance of public awareness and vigilance in maintaining cyber defenses at all levels.