hope it help some of my friends .

1. CYBER ESPIONAGE

2. MEANING
Cyber espionage is a form of cyber attack that steals classified,
sensitive data or intellectual property to gain an advantage over a
competitive company or government entity.

3. History OF CYBER ESPIONAGE
The first documented case of cyber espionage pre-dated the web itself.
In 1986, Clifford Stoll, who at the time was managing computers at
Lawrence Berkeley National Laboratory in California, noticed some
strange activity in computing time records. This eventually led him to a
hacker who appeared to be systematically targeting computers at
military bases around the U.S. looking for military secrets. He
eventually created a trap for the attacker, luring him in with a cache of
fake information. The hacker fell for the bait and was identified as
Markus Hess, a West German who had been selling stolen information
to the KGB.

5. Used by
a) Nation States
b) Cyber Criminal Organisations
c) Terrorists, DTOs, etc.,
d) Hackers

6. Tools used for cyber espionage
 Custom malware
Packet capture tools
 Satellite imaging
 Targeted exploitation tools
 Wireless surveillance

7. •Cyber espionage cases

8. Gillette Industrial Espionage
• In 1997, Gillette suffered from industrial espionage after its
engineer disclosed corporate information to the company’s
competitors. Steven Louis Davis worked on the development of
a new razor, but then because of quarrels with his supervisor,
the engineer stole the designed technology of the new shaver
system and revealed it via email and fax to Gillette’s
competitors. Davis was found guilty in industrial espionage and
sentenced to 27 months in jail.

9. Operation Aurora
• In the beginning of 2010, Google claimed that the company was
attacked by of a series of cyber threats originated from China. Apart
from Google, hackers also attacked more than 20 international
companies, including Adobe Systems and Yahoo. Google said that its
intellectual property was stolen and Gmail accounts were also
under persistent threats. The company even considered stopping
censoring its search results in China. Attacks were performed
exploiting a vulnerability in Internet Explorer and combining stealth
programming and encryption techniques.

10. Spying on the Obama and McCain Computers
• Another case of cyber espionage infected the computers of John
McCain and Barack Obama during their presidential campaigns in
2008. Chinese or Russian hackers allegedly installed spyware on the
computers of these two presidential candidates and stole sensitive
data related to foreign policy. The cyber attack was initially
considered as a computer virus, but then technology experts
discovered a leakage of the considerable amount of files. The data
leakage was revealed only after the presidential election during
the federal investigation.

11. Night Dragon
• In 2011, McAfee reported about the Night Dragon operation
initiated by Chinese hackers for attacking the largest European
and American energy businesses, including Royal Dutch Shell
and Baker Hughes. This was one of the biggest cyber espionage
cases when intruders got an access to topographical maps with
potential oil reserves. According to McAfee report, attackers
used a range of unsophisticated hacking tools and techniques
that were available on Chinese hacker websites.

12. Computer Spies Breach Fighter-Jet Project
• In 2009, Pentagon reported that the Fighter-Jet Project came under
assault from unknown intruders. This multi-billion project of the
next generation fighter became a victim of coordinated cyber
espionage attacks during two years. Attackers used computers
located in China for stealing a massive volume of data about
electronics and internal maintenance. Fortunately, the most
sensitive information was kept offline and terrorists weren’t able to
access it. Though, the U.S. officials suspected Chinese hackers, the
true origin of the perpetrators remained undefined.
Flowcharting Rules,

14. •Protection against cyber
espionage

15. • 1. Partner with information security experts to fully understand
the threat landscape while leveraging their visibility across their
entire client base.
• 2. Know which assets need to be protected and the associated
operational risk of each.
• 3. Know where your vulnerabilities lie.
• 4. Fix or mitigate vulnerabilities with a defense-in-depth
strategy.
• 5. Understand the adversaries evolving tactics, techniques, and
procedures allowing you to reshape your defensive
countermeasures as required.

16. • 6. Be prepared to prevent an attack or respond as quickly as possible if
you are compromised.
• 7. While prevention is preferred; rapid detection and response is a
must.
• 8. Have a fall-back plan for what you will do if you are victim of cyber
war.
• 9. Ensure critical infrastructure suppliers have not been compromised
and have safeguards in place to ensure the integrity of systems
provided by these suppliers.
• 10. A nation’s critical IT infrastructure should not be totally reliant on
the internet but have the ability to operate independent if a cyber
security crisis arises.

17. • Protection against cyber espionage
Business line.com

18. THANK YOU