LONDON (Reuters) – British opposition party using a $ 20 per month “basic security” service to protect its website when jackers tried to put it offline last week and delay campaigns online, according to internal emails saw Reuters.
PHOTO FILE: British opposition Labor leader Jeremy Corbyn speaks of a new digital infrastructure policy as part of his Lancaster general election campaign, Britain 15 November, 2019. REUTERS / Andrew Yates
Such entry-level protection is not recommended for large organizations with a high risk of cyber-abuse, but the messages indicate that Labor has decided not to upgrade to an increased security package on cost grounds.
Cyberattacks met back with Labor and the Conservative Party in Britain and Wales last week.
Labor uses Cloudflare services, a cyber security firm, to help protect its website from attacks, from party emails, but it only reflects the level recommended by the company for “professional websites, blogs, and portfolios requiring security. basic. ”
After the attacks considered the party upgraded the increased security measures that large organizations used to help ensure that their websites remained online, but they decided that the annual cost of $ 60,000 was not justified. keep, according to the emails.
While the lower security package cost the Labor site from serious injury, it may not be sufficient if the party has more sophisticated attacks, a person who knows the subject said.
In a separate message, Labour's technology head warned that the party could be at greater risk of cyber-prices on days of two election debates on television and the launch in the exhibition.
A labor party spokesperson refused to comment. Cloudflare did not reply to comments.
A Conservative Party spokesperson did not directly answer questions about the nature of the website defenses used by the party. “We have the appropriate security measures in place to protect the IT infrastructure and networks of the party and so have not been affected in the recent incident,” she said.
Britain voted on 12 December at an election called Prime Minister Boris Johnson to try to break Brexit in parliament to break more than three years since the country voted to leave the European Union.
The country's security agencies warned that Russia and other countries can try to interfere with the election with cyber cyber or segregated political messages on social media, which Moscow refuses.
Officials say that initial investigations have found nothing to link the attacks on Labor and the Conservators with a foreign state.
The attackers used a simple common technique to try to offline the web services of the parties by flooding them.
Cloudflare says that its services help protect so-called service disclaimer (DDoS) attacks by filtering malicious website requests and absorbing additional traffic.
Both Labor and Conservators provided data to the police and the National Cyber Security Center (NCSC), part of the GCHQ signals information agency, to assist in the investigation of the attacks, according to people who know the subject.
The NCSC said that the analysis was ongoing after last week's attacks but it refused to comment on specific defenses to the use of individual political parties.
“We are confident that the labor party has taken the necessary steps to deal with the attack. The attack was unsuccessful, ”said an NCSC spokesperson, adding that major parties were informed of how to protect future DDoS attacks.
Reporting by Jack Stubbs; Edited by Mark Bendeich and Giles Elgood
(tTTranslate) US (t) BRITAIN (t) ELECTION (t) TABLE (t) EASACH (t) Computer Crime / Hacking / Cybercrime Election / Voting (t) West Europe (t) Exclusive Technology (TBC) Major (t) Privacy / Data Protection (t) Internet / t (t) Europe (t) Enterprise Reporting (t) United Kingdom (t) International / National Security (t) United States of America