Satendra K Aug 02, 2024

Paris 2024 Olympics: Cybersecurity Challenges and Solutions

Are you aware that more than 450 million cyber-attacks are expected during the Paris 2024 Olympics? It's true! 

The 2020 Tokyo Olympics saw an estimated 450 million cyberattacks. For the 2024 Paris Olympics, experts predict 8 times more attacks than the Tokyo Olympics, given the advancements in technology and the increased connectivity of devices.

According to the World Economic Forum, the Olympic Games, which opened on 26 July 2024, is expected to sell over 13 million tickets and bring more than 15 million visitors to Paris, generating an estimated €11 billion in economic activity in Île-de-France. Experts also warn that ‘the massive ticketing operation and surging commerce, make the Games an attractive target for cyberattacks’. 

The Olympic Games represent human achievement and international unity. As games are the primary motive, they also stand as a prime target for cyber threats in today’s network-connected world. “The Games are facing an unprecedented level of threat But we've also done an unprecedented amount of preparation work so I think we're a step ahead of the attackers” said Vincent Strubel, the director general of ANSSI, France’s cybersecurity agency, according to Reuters.

In this 2024 Paris Olympics, cybersecurity experts in France are all set to weather the storm of any kind of digital threat. Nevertheless, let's take a look at the cybersecurity challenges that may arise during the Paris Olympics and solutions for it

Also Read; What is Cyber Attack? Definition and Prevention

Cybersecurity Challenges Anticipated in Paris Olympics 2024

The 2024 Olympics in Paris is expected to face a variety of threats, particularly in the realm of cybersecurity. Here are some of the most common Cyber attacks that may emerge during this high-profile event:

  1. Spoofing Schemes

An important threat that may be considered is Spoofing Schemes, They are scams that entail attackers using fraud emails or messages to access personal information such as login credentials or credit card numbers. Volunteers have been targeted with suspicious emails impersonating official communications. These emails attempt to lure recipients into providing sensitive information, posing risks of identity theft and account compromise.

  1. DDoS

Sophisticated methods such as distributed denial-of-service (DDoS) attacks flood network systems with harmful traffic, potentially disrupting Olympic operations. With geopolitical tensions impacting international relations, Russian state-backed hackers are a major concern. Groups like People’s Cyber Army (PCA) and NoName057(16) have already indicated plans for disruptive cyber activities, including DDoS attacks and data compromises. 

  1. Mobile Application Risks

Cybercriminals exploit the popularity of event-related mobile apps to steal credentials and perpetrate fraud. Cybercriminals take advantage of the popularity of event-related mobile apps to steal credentials and perpetrate fraud. They may create mobile apps similar to legitimate ones used in the Olympics. fraud.org has been identified, posing risks such as ticket fraud and personal data manipulation.

  1. Sophisticated Bot Attacks

As businesses increase their online presence to take advantage of the Olympic audience, they become prime targets for bot-driven attacks. These bots can carry out various malicious activities, including scraping websites for data theft, launching distributed denial of service (DDoS) attacks to disrupt businesses, and conducting ticket scalping operations to inflate prices and control ticket sales.

  1. Dark Web Activities

Threat actors on the dark web, such as "dank31337", are actively seeking unauthorized access to Olympic systems. They offer substantial sums for tools and credentials aimed at disrupting the event’s operations through phishing and credential theft.

  1. Fake Website and Account Creation

Attackers may create fake accounts and websites to exploit promotional offers, engage in phishing scams, spam legitimate users, or skew platform analytics. These fake accounts can effect user trust and platform integrity.

Read on; Benefits Of Cyber Security Certifications

  1. Cyber Espionage

State-sponsored actors may attempt to gather intelligence by targeting government officials and decision-makers attending the Games. This could involve phishing attacks or malware deployment.

  1. Email spoofing

Email spoofing is a significant concern, where attackers impersonate legitimate entities to deceive recipients. Without proper email authentication protocols (like DMARC, SPF, and DKIM), sponsors and partners are at risk of being targeted

  1. Phishing 

Phishing scams are anticipated to surge, leveraging the excitement surrounding the Olympics. Cybercriminals may send emails that appear to be from official Olympic partners, enticing recipients to click on malicious links or provide personal information. These scams could include Fake Ticket Offers (emails promoting last-minute ticket deals that aim to steal credit card details) and Impersonation of Official Websites.

  1. Ransomware and Malware Attacks

The Olympics' high visibility makes it an attractive target for ransomware attacks aimed at compromising systems for financial gain or disruption.

Potential Targets of Olympic-related Operations

  • International Olympic Committee
  • Athletes, Country Teams, Support Staff
  • Olympic-Related Entities
  • Physical infrastructure linked to games
  • Paris Infrastructure
  • Payment and Ticketing Systems
  • High Profile Individuals Traveling
  • Tourists
eight potential targets of olympic-related operations

Solutions for Cybersecurity Challenges in the Olympics 2024

The Paris 2024 Olympic organisers have implemented comprehensive cybersecurity strategies to effectively address cybersecurity challenges. Here are some of the solutions;

  • Multiple-factor Authentication (MFA): Implementing MFA for all access, including athlete and staff accounts, makes it much harder for attackers to steal login credentials.
  • DMARC Implementation: DMARC Implementation email authentication protocol helps prevent attackers from spoofing official Olympic email addresses.
  • DDoS Mitigation Services: Partnering with security companies that offer DDoS mitigation services allows the Olympics to absorb and deflect large traffic attacks.
  • Traffic Monitoring: Constant monitoring of network traffic allows for early detection and response to suspicious activity.
  • Fact-checking Resources: Providing a central platform with verified information and updates can counter misinformation.
  • Secure Ticketing System
    • Download official event apps from trusted sources only.
    • Monitor for compromised accounts and credentials in dark web forums.
    • Exercise caution with suspicious emails and avoid clicking on links from unverified sources.
    • Make travel and ticket purchases only through legitimate channels and verified websites.
  • Strong Password Policies: Encouraging the use of complex passwords that combine letters, numbers, and special characters can help protect accounts from being easily compromised.
  • VPN Usage: Recommending the use of Virtual Private Networks (VPNs) for all online activities can help protect users' identities and data, especially when accessing public Wi-Fi networks.
  • Data Encryption: Encrypting sensitive data on devices and during transmission can safeguard against data breaches and unauthorised access.
  • Incident Response Teams: Establishing dedicated rapid response incident handling teams that can quickly address and mitigate cyber incidents as they arise is essential for maintaining operational integrity. 

Check out; The Growing Cybersecurity Skills Gap: Recognizing the Need for Action

Outlook

Despite the variety of Olympics-related cyber threats, the security community is better prepared when compared to previous iterations of the Games. Having observed the previous Olympics, we have better insights into the ways the Games could be targeted. This allows cybersecurity defenders to build a proactive and tailored security posture. With the right measures in place, the Paris 2024 Olympics can not only celebrate athletic excellence but also set a standard for cybersecurity in large-scale global events.

 

Chief Technology Officer & Cyber Security Expert Trainer

Satendra K is the Chief Technology Officer at Edoxi Training Institute. A cyber security program leader with more than ten years of experience, he possesses a deep level understanding of state-of-the-art security technologies. His polished communication skills play an influential role in his career as a trainer. As a core member of our cyber security courses team, he oversees the development of cutting-edge curriculum and novel modes of course delivery.

Tags
Technology
Education