Nearly 4,000 vulnerable websites were hacked

Quebec has ordered the emergency shutdown of nearly 4,000 websites and government services that could be vulnerable to one of the most dangerous security breaches in recent years.

Read more: Safe is better than regret, experts say

Read more: Strong winds across Quebec: 250,000 Hydro-Quebec subscribers without electricity

“The balance of comfort is that it is important to ensure that systems are secure before they are shut down and made available,” Eric Care, Minister for Digital Transformation, told a news conference on Sunday.

The government confirms that the closure of these sites was done in a preventative and ineffective manner as no traces of any attempt to introduce them were found at this time.

On Sunday offline sites, Le Journal listed access to Revenu Québec and some services of the Ministry of Education, Ministry of Justice, Retraite Québec Portal, Carnet santé Québec and Espace Hydro-Québec clients, among others.

One day thing

Minister Cairo did not want all services to progress on the date of resumption of their usual course, citing the question of days rather than hours.

One thing is for sure, the job of a true monk is waiting for the government’s cyber security committees.

In the absence of inventory, they need to check “one by one” whether thousands of government agencies are using the popular block affected by the problem.

It should be noted that some services are already back online because you did not use the targeted library or have already made corrections.

Detected last Thursday, the Log4Shell flaw allows hackers to seize a server with a single line of malicious code.

Hackers can then easily capture personal or sensitive data.

Annoying

Computer security experts consulted by The Journal believe that this is one of the most confusing holes in recent memory due to the number of vulnerable systems on the planet and the simplicity of the attack.

“It’s very easy to reproduce a bug Hacking That fact must be taken into account. ”

The Canadian Cyber ​​Security Center issued a warning on Friday about the potential for cyber-attacks related to this flaw.

As a preventative measure, the Canada Revenue Agency website was not yet available Sunday evening.