Power Utilities

As time marches on, many are forgetting the two Russian attacks on Ukraine that shut down their power supply during their cold winters.  Memories fade, but the energy threat continues.  Total shut-down of the electric grid were traditionally rare and

Our colleagues at Wired.com shared interesting information on Iranian “password spraying.”   In the wake of the US assassination of Iranian general Qassem Soleimani and the retaliatory missile strike that followed, Iran-watchers have warned that the

MSSP Alert is posting that last August 2019, Proofpoint researchers reported that three small US utilities had been hit with spear phishing attacks in July utilizing the LookBack malware.  The malicious emails appeared to impersonate a US-based engin

The Securing Energy Infrastructure Act, which passed as part of the United States FY2020 National Defense Authorization Act, pursues the development of defenses through partnerships between US National Laboratories[1] and the critical Energy Sector. 

A floating nuclear power plant has been connected to the Russian electric power grid and has commenced electricity energy for the first time in a remote region of Russia. 

• The vessel Akademik Lomonosov set sail from the port of Murmansk in August. 
• T

Summary:
From a threat perspective, researchers[1] expect cyber-attacks to continue into 2020, as it is getting easier for hackers to attack these systems because they are more exposed to the public Internet.  Not just nation state hackers, but crimi

The Nuclear Power Corporation of India Limited (NPCIL) has reported that malware attributed to North Korean threat actors was found on the administrative network of the Kudankulam Nuclear Power Plant. Although NPCIL has assured partners that the powe

Following an uptick in threats targeting energy and critical infrastructure sectors, the U.S. government, along with private regulatory organizations, are pushing for increased security measures to protect the power grid from potentially devastating

Beginning in July 2019, Proofpoint began tracking a phishing campaign targeting US power utility companies. The campaign, dubbed “Lookback” involved malicious emails leveraging a Microsoft Word attachment that uses macros to deliver the Lookback malw

In early September 2019, the North American Electric Reliability Corporation (NERC) released details on a cyberattack targeting the US power grid that occurred on 5 March 2019.  This incident represents the first attack of its kind to target US based

A recent report released by the cybersecurity company, Dragos, detailed cyber threats to the oil and gas sector and, in particular, industrial control systems. One of the threat groups being tracked as a part of this research, dubbed “Hexane,” is rel

A recent security bulletin has provided situational awareness of a threat to critical infrastructure from White Supremacist Extremists (WSEs) and Homegrown Violent Extremists (HVEs).  Although there is no specific or actionable intelligence at this t