Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

admin
Pinned April 11, 2022

<> Embed

@  Email

Report

Uploaded by user
Justice Department indicts four Russian government workers in energy sector hacks
<> Embed @  Email Report

Justice Department indicts four Russian government workers in energy sector hacks

Hackers are actively targeting US and European power grids

A group may have gained control of energy systems and could be preparing for an attack.

Swapna Krishna
S. Krishna
September 6th, 2017
Justice Department indicts four Russian government workers in energy sector hacks | DeviceDaily.com
Wolfgang Rattay / Reuters

We’ve been talking about the potential of hacker strikes on electric grids for years, and now it looks like the threat is imminent. Symantec reports that a group it calls Dragonfly is targeting energy and power sectors in the US and Europe, with the intention of both learning how these facilities operate as well as eventually gaining control over the systems.

This isn’t the first time we’ve heard of Dragonfly. Back in 2014, Symantec and other researchers identified the group as responsible for a series of attacks on US and European energy systems that stretched from 2010 to 2014. A joint analysis between the Department of Homeland Security and the FBI in 2016 tied Dragonfly to Russian malicious activity, though Symantec has been careful not to speculate on the origins of the group. Now, it appears the hacker organization is active again in a campaign that Symantec has termed “Dragonfly 2.0.”

This series of attacks began in December 2015 with an email scam sent to people within the energy sector. The group gathered network credentials and were able to install back doors that provided remote access to targets’ computers. Symantec cautions that the 2010–2014 attacks may have been an intelligence-gathering phase. Now, the group could be trying to gain access to energy systems for all-out attacks.

Symantec notes that one of the most troubling aspects of this campaign is the use of screenshots. In several US attacks, hackers were able to capture screen grabs of actual control panels for these energy systems. “That’s exactly what you’d do if you were to attempt sabotage,” Eric Chien, a Symantec security analyst, told Wired. “You’d take these sorts of screenshots to understand what you had to do next, like literally which switch to flip.”

It sounds frightening, to be sure, but now that we’re aware the threat exists and is active, there are measures that can be put in place to thwart Dragonfly 2.0. Symantec’s recommendations include encrypting sensitive data, implementing secure passwords and two-factor authentication and making sure overlapping defensive systems are in place. Even with these measures, though, it’s important to remain vigilant to ensure that the group isn’t able to take control of US and European energy systems.

Engadget is a web magazine with obsessive daily coverage of everything new in gadgets and consumer electronics   

(24)