News

Massive ransomware attack on state email domain

Published

2 weeks ago

September 10, 2023

editor

All Government offices using the “gov.lk” email domain, including the Cabinet Office, have lost data from May 17 to August 26, 2023, after a massive ransomware attack, the Information and Communication Technology Agency (ICTA) has confirmed.

The virus could have affected around 5,000 email addresses, ICTA CEO Mahesh Perera said, admitting that there was no offline backup for around two-and-a-half month’s worth of data. Since the online backup system had also been corrupted, users lost emails for that period. The Cabinet Office is among the entities in the Lanka Government Network (LGN). It uses the [email protected] email domain.

Following the attack, ICTA is taking measures to start daily offline backup and to upgrade the relevant application to the latest version which has stronger defences against virus attacks. And the Sri Lanka Computer Emergency Readiness Team (SLCERT) is working closely with ICTA to try and retrieve the lost data, Mr. Perera said.

The LGN is the Government-owned private network that was introduced to connect Government organisations in what the ICTA maintains is “a cost-effective and secure manner”.

The service is being provided from 2007, Mr. Perera said. “Initially, we used Microsoft Exchange Version 2003,” he explained. “The email facility was given to Government offices. In 2014, it was upgraded to Microsoft Exchange Version 2013. This was in use till the attack. But that version is now obsolete, outdated and vulnerable to various types of attacks.”

One gov.lk domain user said that their official email had been receiving suspicious links over the past few weeks and that someone may have clicked one, triggering the ransomware attack. ICTA had planned from 2021 to upgrade the email facility to the latest version but had been constrained by fund limitations and certain previous board decisions, the CEO said.

With the ransomware attack on the morning of August 26, the site was completely encrypted. While ICTA maintains several backups in the LGN cloud, the encryption process that corrupted the server replicated to the online backup systems.

The system was restored within 12 hours of the attack and the backup was also brought back, but without two-and-a-half months of storage. “As a result of this time gap, certain old emails were lost but the service was restored,” Mr. Perera said.

ICTA continues to receive complaints from users seeking full access to the service. The reason for not maintaining regular backup was attributed to “administrative problems”.

Meanwhile, like many other offices, ICTA has been affected by the brain drain triggered by the economic crisis and is recruiting new staff.

(The Sunday Times)

News

Samurdhi Dept. told to conduct survey to identify poverty-stricken families

Published

3 hours ago

September 26, 2023

editor

The Sectoral Oversight Committee on Alleviating the Impact of the Economic Crisis has instructed the Department of Samurdhi Development to conduct a quick survey to identify other poverty-stricken families who need to be empowered.

This was taken into discussion when the Sectoral Oversight Committee on Alleviating the Impact of the Economic Crisis met in Parliament on Sep. 19 chaired by MP Gamini Waleboda Member of Parliament.

Commenting further, the Member of Parliament stated to the officials of the Department of Samurdhi Development to appoint a Committee together with the Ministry of Finance, the Welfare Benefits Board and the Department of Census and Statistics to take the necessary measures.

The discussion was held with the aim of reviewing the goals of the Department of Samurdhi Development to reduce the impact of the economic crisis and the current plans to achieve those goals in the year 2024.

The officials of the Department of Samurdhi Development, who presented the facts, mentioned that at present there are more than sixteen hundred thousand Samurdhi beneficiary families. Accordingly, the department has planned to empower forty-one hundred thousand families in the two years from 2024 to 2026.

The Chair reminded the officials that the responsibility of empowering all families who are affected by the economic crisis and those who are not is entrusted to the Department of Samurdhi Development. The Committee also ordered the Department of Samurdhi Development to immediately prepare a plan to eradicate poverty within the next five years.

The Leader of the Opposition – Sajith Premadasa, addressing the Committee, pointed out the dire need to first establish technical definitions to identify poverty.

The Committee also discussed about the proposed number of new employees in the department, which has been presented in relation to the future plans of the Department of Samurdhi Development. The Committee Chair pointed out that the sacrifices made by the officers of the Department of Samurdhi Development Department during the Covid pandemic cannot be forgotten. The Chair instructed the officials of the Management Services Department to take into consideration the work done by them in the past while approving the proposed number of new employees. Accordingly, the Committee ordered the Management Services Department to come to a final decision about the proposed staff of the Samurdhi Development Department within two weeks and to approve it.

The Committee also discussed the people who have not yet received their pension due to the retired officials of the Samurdhi Development Department and the related reasons. The Chair asked the officials of the Department of Pensions to arrange for the payment of the basic pension to the employees who have not yet received their pension.

News

Inland Revenue Act to be amended

Published

3 hours ago

September 26, 2023

editor

The Cabinet has approved a proposal to amend the Inland Revenue Act No. 24 of 2017, the Government Information Department said.

It has been proposed that it is appropriate to amend the Inland Revenue tax to enable to request tax relief by any charity establishment that provides health facilities to children with disabilities in the society joined hands with government health services / education system and that is established as a legitimate institution prioritizing the well–being of the differently-abled children in society while being established as a legitimate institution or registered under any law enforced for registering social services organizations.

Accordingly, the Cabinet approved the resolution prepared by the acting Minister of Finance, Economic Stabilization and National Policies to direct the Legal Draftsman to draft a Bill to amend the Inland Revenue Act including legal provisions.

News

National Debt Management Institute to be established

Published

3 hours ago

September 26, 2023

editor

The Cabinet has granted approval to establish a National Debt Management Institute.

It has been emphasized in the supplementary Budget of 2022 the importance of the establishment of a State Loan Management Institute as an institutional reformation while enhancing loan management and transparency has been recognized as a prioritized sector even under the appropriation loan facility of the International Monetary Fund (IMF).

Government said that technical assistance has been rendered by the IMF and the World Bank in order to establish the proposed state loan management institute.

The loan management reformation plan, loan management institutional framework and legal framework have been planned by now.

Accordingly, the Cabinet approved the resolution tabled by the acting Minister of Finance, Economic Stabilization and National Policies to direct the Legal Draftsman to draft the Bill of the State Loan Management Act.