The UK’s Independent Police Complains Commission (IPCC) has confirmed that they are investigating into an allegations that Scotland Yard illegally accessed the email accounts of journalists and environmental activists through hackers based in India.
A malware is used to access the account, which encrypts data and locks out the user. This kind of malware is also called as ransomware. The vulnerability that was exploited was discovered and developed by the National Security Agency.
In a statement released IPCC said that “The hackers are alleged to have illegally accessed the email accounts of named individuals who were members of political and environmental pressure groups. Further allegations include the accessing of emails belonging to journalists."
The malware was transferred by email. The victims were sent an encrypted, and compressed file, once they are downloaded it allows ransomware to infiltrate its targets.
IPCC deputy chair Sarah Green said: “These are clearly serious allegations and the IPCC is conducting a comprehensive investigation into the matters raised. This will be a complex investigation given the potential involvement of foreign participants.”
“We would like to hear from the officer who brought these allegations to light or any other officers or police staff who may be able to provide information of use to the IPCC investigation.”
The Met Police said: "The IPCC made the Metropolitan Police Service aware of anonymous allegations concerning the access of personal data and requested the matter referred to them by the MPS. This has been done.
"The MPS is aware that the IPCC is carrying out an independent investigation."
"As this investigation is now in the public domain the MPS can confirm that all possible steps are being taken to ensure all relevant material and associated computer systems are preserved to assist the IPCC investigation."