NSA has detected FSB (Cozy Bear) fingerprints in the power company hacks.
By Ellen Nakashima July 8 at 8:39 PM
Russian government hackers were behind recent cyber-intrusions into the business systems of U.S. nuclear power and other energy companies in what appears to be an effort to assess their networks, according to U.S. government officials.
The U.S. officials said there is no evidence the hackers breached or disrupted the core systems controlling operations at the plants, so the public was not at risk. Rather, they said, the hackers broke into systems dealing with business and administrative tasks, such as personnel.
At the end of June, the FBI and the Department of Homeland Security sent a joint alert to the energy sector stating that “advanced, persistent threat actors” — a euphemism for sophisticated foreign hackers — were stealing network log-in and password information to gain a foothold in company networks. The agencies did not name Russia.
The campaign marks the first time Russian government hackers are known to have wormed their way into the networks of American nuclear power companies, several U.S. and industry officials said. And the penetration could be a sign that Russia is seeking to lay the groundwork for more damaging hacks.
More: https://www.washingtonpost.com/world/national-security/us-officials-say-russian-government-hackers-have-penetrated-energy-and-nuclear-company-business-networks/2017/07/08/bbfde9a2-638b-11e7-8adc-fea80e32bf47_story.html?utm_term=.7e03bca65787
Link to tweet
= new reply since forum marked as read
Sanctions? More of them? Getting hard--plus there's the question as to who sanctions hurt.
Sanctions against Iran were merrily junked because of all the jobs it would mean for Americans. Same for Cuban sanctions. Sanctions against Iraq were considered horrible because commoners suffered--and the same case was made for Iran and Cuba. Even if most citizens did support their governments.
Military action? Bad idea.
Hacking attempts against Russia? Such are best with people who don't matter left out of the loop. That would be you and me.
Complain? Well, that feels good, but it's a waste of time. Plus it's not like we didn't know that various actors were trying to probe for weaknesses. Russia, we like to think, started this kind of hybrid war in the Ukraine--when military support would have made a bigger difference than sanctions. But Stuxnet has to be seen as a good predecessor to this, and it wasn't the first such malware.
Problem is that Microsoft may update things, other vendors may plug holes, but somebody always feels the need to reveal every weakness and flaw because they're just so damned important. It takes them a while to find the flaws, and it's likely that not every hostile foreign intelligence agency knows them all. Until they read about the boasts. "Ha, ha! I found a simple trick that'll disable government computers--just use this code!" And we act like it's a horrible thing that somebody uses that weakness. (We don't put signs in front of our houses: "I lost my house key so I can't lock my door until Friday when the locksmith come. So thieves, just stay out!"
We could have regulations. But regulations are just orders for somebody to do something. If they don't know to do it, if they can't do it, the regulations are pointless or unethical.
"An essential read." Eric Schmidt, CEO, Google
"The most approachable and readable book ever written on the cyber world." Admiral James Stavridis, former Supreme Allied Commander, NATO
Oxford University Press
The book will make you smarter and calmer.
We made these systems. However good everyone else is at using them, we are better.
BLOTUS eagerly shakes his hand, pats his back and says, "It's an honor to meet you." Stupid fuck..
