Cyber resilience requires fixing Indonesia’s old tech

Cyber resilience demands addressing Indonesia's outdated technology. A recent AI-powered worm called WeWorm, demonstrably capable of hijacking WeChat accounts without user interaction, highlights the speed and sophistication of modern cyber threats. Security researchers at California-based firm Calif disclosed the worm, stating it could have reached millions of devices within hours had it been released rather than responsibly disclosed.

While Tencent patched the underlying vulnerability and no harm was reported, the proof of concept underscores the urgent need for improved cyber defenses. A law that targets cyber attacks alone, without addressing governance conditions that exacerbated the damage, will leave Indonesia just as vulnerable. The speed at which threat actors can exploit vulnerabilities has plummeted from a typical 63-day window to just five days, rendering end-of-life, unsupported systems particularly perilous.

Research by US cybersecurity firm Cisco Talos reveals that around 40 percent of the most exploited vulnerabilities in recent periods reside on these legacy devices. Indonesia's recent experience with the Brain Cipher ransomware variant, which struck the Temporary National Data Centre in June 2024 and disrupted over 200 public services, serves as a stark reminder of the consequences of neglecting legacy technology.

The ransom demand of US$8 million was refused, but recovery efforts took weeks. Forensic investigators discovered that the attackers had attempted to disable Windows Defender prior to deploying the ransomware and that the National Cyber and Encryption Agency had not included security assessments as tender requirements for the data center.

Indonesia's legacy technology problem, exacerbated by budget and procurement constraints, underscores the urgent need for comprehensive cyber resilience strategies that encompass not only advanced threat detection but also the proper maintenance and support of aging systems.