{"id":10298,"date":"2022-01-27T14:06:01","date_gmt":"2022-01-27T13:06:01","guid":{"rendered":"https:\/\/jimber.io\/blog\/cyberattaque-de-la-croix-rouge-un-entretien-avec-des-cyber-experts\/"},"modified":"2025-08-04T16:37:19","modified_gmt":"2025-08-04T14:37:19","slug":"cyberattaque-de-la-croix-rouge-un-entretien-avec-des-cyber-experts","status":"publish","type":"post","link":"https:\/\/jimber.io\/fr\/blog\/cyberattaque-de-la-croix-rouge-un-entretien-avec-des-cyber-experts\/","title":{"rendered":"Cyberattaque de la Croix-Rouge : Un entretien avec des cyber-experts"},"content":{"rendered":"

La Croix-Rouge internationale est attaqu\u00e9e. Elle a \u00e9t\u00e9 victime d’une cyberattaque massive. Les donn\u00e9es sensibles d’au moins 515 000 personnes vuln\u00e9rables sont en danger. Certaines de ces personnes fuyaient des conflits ou recherchaient des membres de leur famille qu’elles avaient perdus \u00e0 la suite d’une catastrophe, d’un conflit ou d’une d\u00e9tention. <\/p>\n

L’\u00e9volution de la cyberattaque de la Croix-Rouge<\/h2>\n

La cyberattaque a \u00e9t\u00e9 d\u00e9couverte sur des serveurs appartenant au Comit\u00e9 international de la Croix-Rouge. L’organisation d’aide internationale ne sait pas qui a ex\u00e9cut\u00e9 l’attaque. Mais elle sait que les donn\u00e9es ont \u00e9t\u00e9 vol\u00e9es \u00e0 une entreprise externe \u00e0 Gen\u00e8ve, en Suisse. Aucune donn\u00e9e sensible ne semble avoir \u00e9t\u00e9 divulgu\u00e9e pour l’instant. Les donn\u00e9es sensibles proviennent d’au moins soixante organisations nationales de la Croix-Rouge et du Croissant-Rouge. On ne sait pas encore dans quelle mesure les donn\u00e9es de la Croix-Rouge de Flandre sont menac\u00e9es. Le Comit\u00e9 international de la Croix-Rouge s’inqui\u00e8te des risques potentiels pour les personnes qu’il tente de prot\u00e9ger. Si des informations sensibles concernant des personnes disparues venaient \u00e0 \u00eatre divulgu\u00e9es, la peur et la souffrance des familles seraient encore plus difficiles \u00e0 supporter. L’organisation d’aide internationale s’est sentie oblig\u00e9e de fermer ses syst\u00e8mes informatiques. Mais que faire en cas de cyberattaque ? Nous avons interrog\u00e9 quelques-uns de nos d\u00e9veloppeurs de logiciels pour obtenir quelques r\u00e9ponses. <\/p>\n

\n\n
\"cyberattaque<\/figure>\n<\/figure>\n

Question 1: Hello Alex and Jelle, what are your roles at Jimber exactly?<\/h3>\n

We are software developers who have studied ethical hacking. Right now, we are working on one of the core projects of Jimber. Jimber has three core projects or solutions; Browser Isolation, Web App Isolation, and the Digital Vault. We have been working on the Browser Isolation project for over 3 years. You can see Browser Isolation as our base Isolation technology that we also use in our Web App Isolation and in the Digital Vault. We use these technologies to protect browsers, corporate applications, files, and passwords against cyberattacks.<\/p>\n

\n
\"alex<\/div>\n<\/figure>\n
\n
\"Jelle<\/div>\n<\/figure>\n

Question 2: What do you think will happen to the personal data the hackers have accessed?<\/h3>\n

This is something no one can know for certain, only the hackers can decide what they will do with the personal data. They could sell it to the highest bidder. Or they could just publish them online for everyone to see. But the latter is rather unlikely since there are no scandals to be made public. Another possibility would be that they use the data themselves to con these people in some way. But most of the time this would be done by the people buying the data.Therefore, we assume the hackers will just sell the data and be done with it.<\/p>\n

Question 3: What is the most common cyberattack?<\/h3>\n

Ransomware is a type of malware that hackers use to threaten you. Attackers can threaten to publish the victim\u2019s personal data. Or they can hold it hostage until the victims pay a ransom.<\/p>\n

How does this attack work?<\/h4>\n

The attack works by tricking a user into downloading and executing a malicious piece of software. This software encrypts all data on your system.<\/p>\n

What would be the consequences of a cyberattack like that?<\/h4>\n

This attack could have severe consequences. It could cause temporary or permanent loss of data, a complete shutdown or lockdown of your company\u2019s operations, and financial loss because of the lockdown. Ransomware prevents you from accessing your computer files, systems, or networks. These attacks are also difficult to investigate. They affect society in many ways. They can damage reputations or have a big emotional impact on vulnerable people.<\/p>\n

\n
\"ransomware<\/div>\n<\/figure>\n

Question 4: How would you prevent such an attack with the Jimber solutions?<\/h3>\n

Browser Isolation<\/h4>\n

Using Browser Isolation could prevent less advanced users from downloading and running malicious executables. The file could be contained in an isolated environment.Our Isolation technology is a zero-trust technology. This means that the technology doesn\u2019t trust any website. However, that doesn\u2019t mean that our technology blocks websites. All websites and websites remain accessible and the user doesn\u2019t notice anything. This way, you can be confident your important information stays safe. You can also work anywhere you want and careless employees are no longer a risk.Isolated Browsing moves all user browsing activity in an isolated environment and secures the threats. It allows users to access any website instead of keeping them away from unsafe websites. Viruses or cyberattacks are contained in the isolated Jimber container and are removed as soon as the session is closed. This way, the viruses and cyberattacks are no longer a threat to your organization. Web content never actually reaches your computer and malware is never able to enter your system.Without Browser Isolation, hackers can place malware in the code and your pc would just translate it and execute the code. At Jimber, we redirect the code to another server with virtual computers. This server sends back a stream of images instead of the source code of the website. This way, the code is not accessible or customizable anymore. This stream of images makes it unhackable.<\/p>\n

Web App Isolation<\/h4>\n

Web App Isolation also uses the same principle as Browser Isolation. It\u2019s also our isolation technology, but now it protects web applications. Web app security uses a certain \u2018container\u2019 between web apps and the computer of the end-user. This way APIs are protected and application vulnerabilities can\u2019t be exploited by malware anymore. Now, your company\u2019s applications are protected against cyberattacks.<\/p>\n

The Digital Vault<\/h4>\n

This digital ‘safe’ uses Web App Isolation. It’s a secure environment to share and save documents. It\u2019s also a vault where credentials can easily be shared without actually sharing your passwords. This way, your sensitive data can\u2019t be hacked, intercepted, or accessed by unauthorized people.<\/p>\n

Cybersecurity audits & pentests<\/h4>\n

By having us audit your company, we could locate weak points in your infrastructure and\/or employees, preventing them from doing dangerous things. During a cybersecurity audit, we look for the biggest issues of your organization. We analyze what systems are safe and what systems could create some problems.This analysis includes:<\/p>\n