The colonial is privately held, so there is less pressure than a listed company revealing the details. However, as an administrator of a key part of US cyber infrastructure, the company will be scrutinized for its quality of protection and transparency in how it responds to attacks.
Investigators claimed that the colonial had noticed the attack on Friday, but said the incident appeared to have unfolded over several days. We have adopted FireEye, a private cyber security company. Hacking Sony Pictures Entertainment, Energy facility breaches in the Middle East, and many events involving the federal government.
Shutting down the pipeline to protect it from more widespread and more damaging intrusions is a fairly standard practice. However, in this case, the question remained whether the attacker himself had the ability to turn the pipeline on or off directly, or could perform operations that could cause an accident.
The ransomware attack is the second most known such incident targeting pipeline operators. Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility owned by a pipeline operator. The agency did not reveal the company’s name, but it caused the facility to close for two days.
Cybersecurity experts say these attacks are exacerbated by the rise of automated attack tools and the payment of ransoms in cryptocurrencies, making it difficult to track perpetrators.
“Ransomware launches attacks on soft targets such as hospitals and local governments, and loss of access affects the real world and makes victims more likely to pay,” he specializes in threats to industrial systems. Said Ulf Lindqvist, director of SRI International. “We are not only talking about the risk of losing your email, but also the risk of injury and death.”
Based in Alpharetta, Georgia, the colonial pipeline is owned by several US and foreign companies and investments, including Koch Industries and Royal Dutch Shell. The pipeline connects Houston to New York Harbor and New Jersey, and also supplies jet fuel to major airports, including the Atlanta and Washington DC regions.
Cyberattack forces US top pipeline shutdown
Source link Cyberattack forces US top pipeline shutdown