COP_2023_V7_pages

n 60% of fraud goes through mobile devices, 80% of which are generated from mobile apps
n $1,077 is the average cash amount attackers demand
n 81% of the US population has a social media account
n Chinese Cyberattacks accounted for over 20% of Cyberattacks in 2017
n $80 billion held in cryptocurrency is laundered annually
5.6.2 According to reports (Cybriant – Appendix 1) as much as 0.8% of global GDP is lost to Cybercrime. In 2017
Cybercriminals extorted around $1.5 trillion globally with $5 million attributed to ransomware. It is estimated that
over the next 5 years private companies could lose more than $5 trillion dollars to Cybercrime. 53% of
Cyberattacks result in average losses of over $500,000.
5.6.3 On the 30th September 2020, the United Nations International Maritime Organisation (IMO) suffered a Cyberattack
which disrupted many of its systems.
5.6.4 On the same day the French maritime transport and logistics giant CMA CGM S.A. revealed it was also the victim
of a malware attack, on 28th September 2020, that affected some servers on its network. This follows similar
attacks on Maersk (2017), COSCO (2018) and MSC (April 2020) raising fears that the maritime industry, which
accounts for the transportation of 90% of global trade, is regarded as a highly valued target for Cybercriminals.
5.6.5 Cyber-crime is an unfortunate fact that we must live with. It is a very lucrative market estimated to be worth trillions
every year. Innovative cyber security software and systems are constantly being developed but Cybercriminals
then develop more divisive methods to circumvent the security systems and so the process continues. Cyber
threats, similar to health and safety hazards, are always present and the best form of defence against them is to
maintain a robust cyber security policy, which remains up to date, aware and informed of the latest threats and
take the appropriate action to defend against them.
5.6.6 As we progress to more automated and networked systems, such as MASS vessels, more extreme forms of
Cybercrime could include:
n Hijacking of vessels and cargoes for personal use/financial gain
n Holding vessels and cargoes for ransom
n Environmental terrorism, (threatening to release chemical cargoes or running vessel aground)
n Terrorism (taking control of vessels to damage other vessels, assets or reputations.
5.7 CYBERCRIMINALS
5.7.1 A Cybercriminal is anyone who attempts to access a computer system or network without the appropriate authority
or permission with the intention of committing a Cybercrime to:
n Perform reconnaissance of Networks, Computers, ICT systems, IoT and OT Devices etc;
n Discover potential software and hardware vulnerabilities;
n Exploit identified vulnerabilities;
n Propagate malicious code and infect ICT systems (Install viruses, trojans, worms and malware etc);
n Gain administrator privileges and create user accounts;
n Modify, delete, steal, encrypt/decrypt passwords, confidential files, configurations
n Steal money, crypto currency, and Personally Identifiable Information (PII) such as credit card details, ID
number, healthcare information etc;
n Ransom and Blackmail for money;
n Steal confidential data for sale on the Dark web;
n Render servers and critical devices inoperative;
n Jeopardise the confidentiality, integrity and accessibility of data; and
MASS UK Industry Conduct Principles and Code of Practice Version 7 39