The upcoming Paris 2024 Olympics faces significant cybersecurity threats, with Russian threat groups posing the highest risk.
The upcoming Paris 2024 Olympics faces significant cybersecurity threats, with Russian threat groups posing the highest risk. According to Mandiant, a cybersecurity firm owned by Google, Sandworm (APT44, also known as Frozenbarents) is the most likely Russian group to engage in disruptive, destructive, or hybrid cyber operations, alongside intelligence collection. Historically, Russian cyber actors have targeted the Olympics, as seen in Rio 2016, where Fancy Bear (APT28) compromised anti-doping officials, and in Pyeongchang 2018, where Sandworm deployed a wiper attack and spread trojanized mobile apps. The Tokyo 2020 Games also saw Russian cyber reconnaissance of Olympic officials and organizations.
Other pro-Russian hacktivist groups, such as Anonymous Sudan, Cyber Army of Russia Reborn, NoName057(16), UserSec, and Server Killers, present additional threats. China, Iran, North Korea, and Belarus pose moderate to low cyber risks, with China’s APT31, APT15, UNC4713, and TEMP.Hex likely to conduct espionage operations targeting high-profile attendees. Iran’s APT42, linked to the Islamic Revolutionary Guard Corps (IRGC), may exploit the event for operations related to the Israel-Gaza conflict, while North Korean actors could engage in financially motivated cybercrime. Beyond nation-state threats, ransomware gangs, scammers, and fraudsters may exploit the Olympics’ financial transactions through ticket scams, phishing, and extortion schemes. While these threats are serious, cybersecurity experts emphasize that defensive measures are in place to mitigate risks and safeguard Olympic infrastructure, attendees, and digital systems.
