Canada's spy agency hacked into hostile states and terrorist groups
Canada's Communications Security Centre conducted a series of state-authorized cyber operations last year targeting criminal groups involved in the trade of precursor chemicals, extremist organizations, and ransomware gangs, according to a report by Zamin.uz.
Details were disclosed in the agency's annual report. The unusually public statement from an intelligence body typically operating in strict secrecy drew attention from international experts.
The news has sparked widespread discussion in global media. According to the report, the agency carried out three major active cyber operations during the year.
These refer to direct attacks against foreign entities deemed threats to Canada's national security. The primary objective of the operations was to disrupt adversary activities and completely disable their digital infrastructure.
The first operation targeted international intermediaries involved in the trade of chemical precursors necessary for the production of synthetic drugs. The intelligence service gathered information on these individuals, blocked their communication channels, and significantly restricted their ability to operate.
These measures helped reduce the flow of dangerous substances into the country's streets. The second key focus was countering a foreign extremist group.
This group had been spreading violent ideologies online and recruiting new members, including Canadians, into its ranks. By analyzing signals intercepted from electronic devices, the Communications Security Centre identified vulnerabilities within the group.
As a result, the cyberattack dealt a blow to the extremists' infrastructure and limited their capacity to recruit new members. The third major operation targeted a hacker group operating under a service-based payment model.
This group rented out its infrastructure to other cybercriminals, enabling attacks on Canada's healthcare, transportation, and business sectors. The intelligence service not only took down the group's servers but also erased all data stored on them.
Additionally, the agency imposed temporary technical restrictions on what is considered one of Canada's most dangerous ransomware gangs. These measures aim to increase the cost of attacks for cybercriminals and eliminate their illegal revenue streams.
While the report does not specify the exact countries where these groups are located, it emphasizes that their activities contribute to global instability. International observers note that public disclosure of cyber operations by intelligence agencies is a rare occurrence.
Standard procedures and techniques are typically kept classified to prevent adversaries from adapting. However, in recent years, some states have adopted a more transparent approach, partially revealing their activities to deter threats and warn adversaries.
