The U.K., the Netherlands and other European Union governments are pushing the bloc to expand the scope of its sanctions regime to include cyber attacks, following alleged attempts by Russian and Chinese operatives to infiltrate the computer systems of agencies in Europe and the U.S.<\/p>\n
The EU has sanctions protocols in place targeting states for violating nuclear and chemical weapons treaties or harboring terrorism. Now the group of countries, that also includes Estonia, Finland, Lithuania and Romania, wants the bloc to introduce a similar system against the individuals and organizations that are behind cyber-attacks, according to a memo obtained by Bloomberg. EU leaders are slated to discuss security next week in Brussels.<\/p>\n
\u201cWe urgently need to implement a similar regime to address malicious cyber activity,\u201d the countries wrote in the memo to the EU\u2019s other member states. \u201cThe pace of events has accelerated considerably,\u201d making \u201cthe introduction of such a regime a pressing priority,\u201d according to the memo.<\/p>\n
U.S., U.K. and Dutch authorities last week accused officers from Russia\u2019s GRU military intelligence agency of attempting to breach organizations that were looking into allegations of Russian wrongdoing, including several anti-doping agencies and a United Nations chemical weapons body. A separate Bloomberg Businessweek story last week detailed how China\u2019s intelligence services had ordered subcontractors to plant malicious chips in Super Micro Computer Inc.\u2019s server motherboards.<\/p>\n
EU sanctions typically take the form of asset freezes against companies and individuals and travel bans against individuals. The bloc also has the ability to apply broader economic penalties — a policy used against Russia over its encroachment in Ukraine.<\/p>\n
The group is recommending that cyber penalties focus on individuals and entities. It said the door should also be left open to making cyber-crimes also subject to \u201csectoral measures.\u201d<\/p>\n
The EU has been mulling such a cyber sanctions regime since 2015 and the group of countries is pressing the bloc\u2019s 28 nations to formally agree on the matter at a gathering of EU leaders in Brussels next week.<\/p>\n
The next draft of the summit\u2019s conclusions will be circulated among the EU\u2019s national governments on Monday. A person familiar with the matter said that European Council President Donald Tusk, who chairs the meetings of the bloc\u2019s leaders, is mulling whether to include the cyber sanctions reference in the latest version. The communique will then be subject to additional revisions by and on Oct. 18, when EU leaders formally adopt it as a collective decision.<\/p>\n
Sanction-worthy behavior would include criminal attacks on information systems, cyber-enabled theft of intellectual property and malicious cyber activities from state or non-state actors, whose behavior was explicitly or tacitly condoned by a foreign government, the countries said. They added the EU should also consider sanctioning activities that seek to interfere in elections. EU elections are set for the spring.<\/p>\n
Attributing cyber attacks remains a key hurdle to any sanctions regime, as bad actors often try to fake data points like internet protocol addresses and domain names that could trace back to them. The countries in their memo, however, pointed to detailed and well-researched reports produced by the private sector using open source evidence.<\/p>\n
\u201cThe lack of an international response leads\u201d actors to conclude that malicious cyber activity is \u201clow cost,\u201d the countries wrote. \u201cRestrictive measures would be a powerful tool to change behavior through signaling at a political level that malicious cyber activity has consequences.\u201d<\/p>\n
The U.K., the Netherlands and other European Union governments are pushing the bloc to expand the scope of its sanctions regime to include cyber attacks.<\/p>\n","protected":false},"author":341034,"featured_media":87669,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[27],"tags":[15227,12909,50335],"class_list":["post-279579","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-cybersecurity","tag-european-union","tag-sanctions"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/279579"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341034"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=279579"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/279579\/revisions"}],"predecessor-version":[{"id":279581,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/279579\/revisions\/279581"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/87669"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=279579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=279579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=279579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}