This article was published on July 26, 2024

The Games could become a feeding frenzy for cyber villains

The Paris Olympics 2024 kicked off today. But as the City of Light opens its gates to millions of spectators, officials are bracing themselves for a cyber war.

Analysts predict that there could be as many as four billion cyber attacks at this year’s Games. The official Paris Olympics 2024 app is particularly vulnerable.

“This app handles vast amounts of personal and transactional data, making it a prime target for cybercriminals,” said Sakthi Mohan, cloud security lead at California-based Synopsys Software Integrity Group .

The Paris Olympics app has already been downloaded over 10 million times on Google Play. It allows users to access a map of the Games, the schedule, live updates, replays, and more. The app also gathers your personal information, including name, address, email, photos, and videos.

The latest rumblings from the EU tech scene, a story from our wise ol' founder Boris, and some questionable AI art. It's free, every week, in your inbox. Sign up now!

Organisers have labeled it “your personal companion for the Games.” For hackers, that’s the allure.

“Malicious actors might seek to exploit vulnerabilities in the app for financial, political, or other harmful purposes,” said Kelvi n Lim, senior director at Synopsys.

Back in 2022, an audit of the mandatory Beijing Winter Olympics app found that hackers could easily undercut encryption protections — exposing sensitive health data or passport details.

Major events, which attract large numbers of people to one place at one time, can become a feeding frenzy for cybercriminals.

Last month, hackers stole the personal details of 560 million Ticketmaster customers worldwide. The cyber villains obtained names, addresses, phone numbers, and even credit card numbers.

“The breach was a wake-up call for sporting event organisers,” said Lim.

France’s cybersecurity agency, ANSSI, has assembled a 630-strong cyber team in preparation for Paris Olympics hacking barrage. Cybersecurity firm Cisco Systems France and the US Cybersecurity and Infrastructure Agency are providing supporting services, Bloomberg reports .

The cyber dream team is expected to encounter threats ranging from phishing scams and spoofing schemes to distributed denial-of-service (DDoS) attacks that could disrupt critical services. The Olympic Games’ systems and apps as well as nearby shops, banks, and government agencies are all in the firing line.

Geopolitical tensions fuel Paris Olympics cyber risk

Russian hackers pose the greatest cyber threat, according to recent reports from three cybersecurity firms, including Google’s Mandiant.

Last month, a Russian hacktivist group called the People’s Cyber Army launched DDoS attacks on several French websites. The group claimed responsibility for the attacks, saying that they were a “training exercise” in preparation for large-scale siege during the Paris Olympics.

The Olympics have been hacked before. At the Winter Olympics in South Korea in 2018, hackers linked to Russian intelligence services disrupted the online ticketing system and cut WiFi at the stadium during the Opening Ceremony.

Russia and Belarus were barred from participating in the Paris Olympics due to Russia’s ongoing invasion of Ukraine — adding to the heightened volatility.

“With geopolitical tensions and the advent of AI-enhanced cyber threats, the cybersecurity landscape for the Paris Olympics is more complex than ever.”

Siôn is a freelance science and technology reporter, specialising in climate and energy. From nuclear fusion breakthroughs to electric vehic (show all) Siôn is a freelance science and technology reporter, specialising in climate and energy. From nuclear fusion breakthroughs to electric vehicles, he's happiest sourcing a scoop, investigating the impact of emerging technologies, and even putting them to the test. He has five years of journalism experience and holds a dual degree in media and environmental science from the University of Cape Town, South Africa. When he's not writing, you can probably find Siôn out hiking, surfing, playing the drums or catering to his moderate caffeine addiction. You can contact him at: sion.geschwindt [at] protonmail [dot] com