International Criminal Court Reports Sophisticated Cyberattack

Red Dog Security

05 Jul 2025 — 2 min read

The International Criminal Court (ICC) has confirmed it is investigating a "sophisticated" cyberattack that targeted its internal systems last week. The breach has raised fresh concerns about the vulnerability of global justice institutions to cyber threats.

Key Details

The ICC described the incident as both “complex and targeted,” emphasizing that the court’s cybersecurity monitoring systems detected and contained the attack shortly after it began.

This marks the second major cyber incident involving the ICC in recent years, following a 2023 cyber-espionage breach that remains unsolved.

At this stage, the court has not disclosed:

The precise nature of the attack
Whether any data was accessed, stolen, or encrypted
Who may have been responsible

ICC’s Official Statement

In a brief public announcement, the court stated:

“This incident was promptly identified, confirmed, and contained using the ICC’s alert and response mechanisms. We are currently assessing the impact and implementing mitigation measures.”

The statement did not specify the type of malware or exploit used, nor whether court proceedings or sensitive investigations were affected.

Context and Background

The ICC—based in The Hague—is responsible for prosecuting war crimes, genocide, and crimes against humanity, making it an attractive target for state-sponsored hackers and politically motivated cyber actors.

In 2023, the court experienced a similar incident, later classified as a cyber-espionage operation. While no data compromise was confirmed at the time, the attack underscored the growing cyber risks facing institutions dealing with international conflict, human rights, and criminal accountability.

Security experts have warned that entities like the ICC are high-value targets for surveillance operations aimed at:

Tracking investigations involving sensitive geopolitical issues
Disrupting prosecutions of national or military leaders
Intimidating witnesses and legal personnel

Why It Matters

This latest breach serves as a reminder that no institution—no matter how globally significant—is immune to cyber threats. With the ICC actively handling cases involving war crimes in Ukraine, Syria, and other conflict zones, the timing of the attack raises fresh concerns about foreign interference and digital sabotage.

The incident also puts pressure on international legal bodies to strengthen cybersecurity infrastructure, invest in real-time threat detection, and adopt more robust data protection protocols.

We’ll continue to follow developments as the ICC concludes its investigation and provides further details on the scope and impact of the attack.

Ask ChatGPT

352 Android Apps Infected with IconAds Adware

Security researchers at Human Security have uncovered a massive ad fraud operation dubbed IconAds, involving 352 malicious Android apps previously available on the Google Play Store. At its peak, the campaign generated over 1.2 billion ad requests per day, primarily targeting users in Brazil, Mexico, and the United States.

AI Chatbots Like ChatGPT Are Providing Fake URLs for Major Companies

Cybersecurity analysts at Netcraft have uncovered a troubling trend: AI chatbots frequently generate incorrect or misleading URLs when asked to provide official website links for major brands. According to researchers, this flaw opens a dangerous new vector for phishing and domain hijacking attacks. Key Findings from Netcraft’s Study The

Hackers Leak Allegedly Stolen Telefónica Data

A hacker is threatening to release 106 GB of data allegedly stolen from Spanish telecommunications giant Telefónica, though the company firmly denies any recent breach or data compromise. The threat actor, operating under the alias “Rey,” claims the intrusion occurred on May 30, during which over 12 hours of data

.es Domains Become 19 Times More Popular Among Phishers

Cybersecurity researchers at Cofense report a dramatic rise in phishing campaigns leveraging .es domains, which are officially reserved for Spanish-language websites or entities based in Spain. The use of these domains by cybercriminals has surged 19-fold since the beginning of 2025, making .es the third most exploited top-level domain (TLD)