Cybersecurity Strains: Indian Cyber Force's Alleged Attack on Canadian Air Force and Escalating Tensions

Sikh Separatism, Cyber Threats, and the Complex Landscape of India-Canada Relations

In January 2022, there have been historical tensions between India and Canada related to the issue of Sikh separatism and the Khalistan Movement. The Khalistan Movement advocates for an independent Sikh state in India, and some Sikh separatists have found refuge in Canada, contributing to occasional strains in the bilateral relationship.

These tensions have manifested in various ways, including diplomatic discussions, extradition requests, and concerns raised by India about the alleged support for Sikh separatist activities on Canadian soil. The Canadian government, on its part, has emphasized the importance of freedom of speech and expression within its borders.

Indian Cyber Force:

The Indian Cyber Force (ICF) is a group of hackers that have been active since 2015. They are known for their attacks on government and military websites. On September 21, 2023, the ICF announced they had successfully attacked the Canadian Air Force website. They shared a screenshot of the error message displayed on the compromised website.

The error message stated that the website had been "hacked by the Indian Cyber Force." It also included a link to the ICF's website. The attack was likely carried out using a SQL injection attack. This attack allows hackers to gain access to a database by injecting malicious code into a web form.

The ICF's attack on the Canadian Airforce website is a reminder that even government and military websites are not immune to attack. 

Purposes of Hacking Military Websites:

The purpose of hacking military websites can vary, and the motivations behind such actions are diverse. Some common reasons include:

Espionage:

    Gathering intelligence on military strategies, plans, and capabilities is a significant motive for hacking military websites. State-sponsored actors or rival nations may seek to gain an advantage by accessing sensitive information.

Disruption of Operations:

    Hacking attempts may aim to disrupt military operations by targeting communication networks, logistics systems, or other critical infrastructure. This disruption could impair a military's ability to function effectively.

Propaganda and Symbolic Attacks:

    Some hackers engage in cyber activities as a form of political or ideological protest. By compromising military websites, they may attempt to convey a message, promote a cause, or express dissent.

Testing and Demonstrating Capability:

    Hackers may target military websites to test their skills, demonstrate their capabilities, or showcase vulnerabilities in a country's cybersecurity infrastructure. This can serve as a means of intimidation or a show of technical prowess.

Cyber Warfare:

    In a broader context, hacking military websites can be part of a larger cyber warfare strategy. Nations may engage in cyber operations as a component of their overall defense or offense capabilities.

Extortion:

    Hackers may attempt to extort money or concessions from military organizations by threatening to release sensitive information or disrupt operations.

Non-State Actors and Hacktivism:

    Non-state actors, hacktivist groups, or individuals may target military websites to promote a particular agenda, protest perceived injustices or express opposition to military actions.

Cyber Threat Warning:

The Indian Cyber Force had previously threatened Canada on September 21, warning via social media to "get ready to feel the power" of its attacks on Canadian cyberspace.

On September 22, the group expressed its discontent with the Canadian government's "allegations and anti-India politics."

Indian Cyber Offensive:

A Distributed Denial of Service (DDoS) attack is a malicious attempt to disrupt the regular functioning of a targeted system, service, or network by overwhelming it with a flood of traffic. Unlike traditional cyberattacks that aim to breach security for unauthorized access, DDoS attacks primarily focus on making online resources temporarily or indefinitely unavailable to users.

During a DDoS attack, a large number of compromised computers, often forming a botnet, are coordinated to send an excessive volume of requests or traffic to the targeted server or network. This surge in traffic overwhelms the system's capacity to handle legitimate requests, leading to a slowdown or complete unavailability of services.

The distributed nature of DDoS attacks, involving multiple sources, makes them challenging to mitigate. Attackers often exploit vulnerabilities in networks or use amplification techniques to magnify their impact. DDoS attacks can be financially motivated, ideologically driven, or used as a diversionary tactic while other malicious activities are carried out.

Calling it a distributed denial-of-service (DDoS) attack when bots stop websites after multiple visits, Canadian defense minister Bill Blair said: "That's a very common thing that happens, unfortunately, often. But our cyber officials and security officials acted very, very quickly.

India rejected the allegations with a strong statement, calling them "absurd". It also asked Canada to come down hard on terrorists and anti-India elements operating from its soil and suspended visa services for Canadians.

Closing Thoughts:

The complex dynamics between India and Canada, marked by historical tensions related to Sikh separatism, took a concerning turn with the reported cyber activities of the Indian Cyber Force (ICF). The ICF's alleged successful attack on the Canadian Air Force website, coupled with their threats and discontent expressed on social media, underscores the evolving landscape of cyber threats in international relations.

The purposes behind hacking military websites, as outlined, reveal the multifaceted motivations that drive such actions, ranging from espionage and disruption of operations to ideological agendas and cyber warfare strategies. The threat posed by DDoS attacks, exemplified by the Canadian context, emphasizes the vulnerability of even government and military cyber infrastructure.

The situation necessitates ongoing vigilance and collaboration between nations to bolster cybersecurity measures, exchange threat intelligence, and address the increasingly sophisticated tactics employed by malicious actors. As technology continues to advance, the global community faces the shared challenge of securing critical digital assets and mitigating the impact of cyber threats on national security.