Slashdot Mirror
Ukraine Power Outage May Be the First One Caused By Hackers (arstechnica.com)
bricko notes a report on what appears to be the first power outage known to have been caused by hackers:
Highly destructive malware that infected at least three regional power authorities in Ukraine led to a power failure that left hundreds of thousands of homes without electricity last week, researchers said. ... On Monday, researchers from security firm iSIGHT Partners said they had obtained samples of the malicious code that infected at least three regional operators. They said the malware led to "destructive events" that in turn caused the blackout. If confirmed it would be the first known instance of someone using malware to generate a power outage.
Over the past year, the group behind BlackEnergy has slowly ramped up its destructive abilities. Late last year, according to an advisory from Ukraine's Computer Emergency Response Team, the KillDisk module of BlackEnergy infected media organizations in that country and led to the permanent loss of video and other content. The KillDisk that hit the Ukrainian power companies contained similar functions but was programmed to delete a much narrower set of data, ESET reported. KillDisk had also been updated to sabotage two computer processes, including a remote management platform associated with the ELTIMA Serial to Ethernet Connectors used in industrial control systems.
Over the past year, the group behind BlackEnergy has slowly ramped up its destructive abilities. Late last year, according to an advisory from Ukraine's Computer Emergency Response Team, the KillDisk module of BlackEnergy infected media organizations in that country and led to the permanent loss of video and other content. The KillDisk that hit the Ukrainian power companies contained similar functions but was programmed to delete a much narrower set of data, ESET reported. KillDisk had also been updated to sabotage two computer processes, including a remote management platform associated with the ELTIMA Serial to Ethernet Connectors used in industrial control systems.
In former and possibly future Soviet Russia frosty piss gets YOU
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
Look, I know that Ukraine is in turmoil, and I really do sympathize with the Ukraines that are trying to keep their country together. But, regardless of which side these hackers were on, it is simply cowardly to attack the electrical system.
People's lives depend on it, sometime's literally. By disrupting the electrical grid you aren't helping either side, and are actively putting people at risk.
Ask Trinity
this story that's still on the front page? http://it.slashdot.org/story/1...
Horror & SciFi Erotic Nudes
Didn't Putin Jugend already do something similar in Estonia?
When LUDDITES put power stations on the Internet using LUDDITE systems, they get hacked by Modern App Appers!
Modern app appers know that only Apps can app Apps, so if their power stations were powered by Apps instead of the LUDDITE Internet, they wouldn't be appable!
Apps!
Couldn't it be that Ukrainian power networks are just old and crumbling, management and specialists are incompetent and the cold weather last week didn't help? But hey, it's much easier to blame it on hackers, who are "clearly" sponsored by Putin himself.
And sure enough Ukraine simply blows up power lines going to Crimea to leave 2 million people without power in the midst of winter - no hackers needed.
I know that some people throw around the term “terrorism” too much. But this is a sad and increasing element of our modern society. When setting off bombs, the terrorists have to go through huge efforts to go to the target and plant bombs without getting caught. You know you’re killing humans. The terrible thing about cyberterrorism is that it’s too much like Ender’s game. From the comfort of their homes, they can take out infrastructures 1000s of miles away, and the people they’re affecting are dehumanized, because the terrorists never have to face their victims in any way. Hahaha, we took out the electrical grid, but we’re conveniently blind to the fact that we’re shutting down hospitals longer than their backup generators can handle.
I really wish I knew more about cybersecurity, because I would love to get involved in the defense against this kind of terrorism and wanton destruction. I want to protect against attacks and also develop ways of identifying the attackers so they can be arrested and stopped before they can do any damage.
I don’t care if someone hates me for being part of the “Christian West” or whatever. They can argue with me and call me all sorts of offensive things, and I think that is their right to have an opinion. I mean, I think sexist, racist, and homophoic remarks are terribly distasteful, but I think that people should have the right to have a distasteful opinion. It’s only when you injure someone or directly interfere in their lives does something become criminal. These terrorists are criminals, and everyone else needs to work very hard to stop the spread of this kind of behavior.
And to think that a FREE air gap would have prevented this. Pay attention US Energy Companies, you already have personnel at your plants -- turn off the dang outside network. When someone needs in, an inside operator turns on a VPN line for that person for that event only, then turned off again. Better and cheaper than the millions that they want to pump into network security.
In times past when you wanted to "hack" the power lines you used an axe or something similar.
Or maybe those were "whackers" *whackwhackwhack*.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
As provided elsewhere here is some more information on what was actually found.
Time to offend someone
Isn't it simpler to assume it is Putin's computer terrorists? The outage does coincide with increases sanctions by Ukraine on the criminals in Russia.
A hundred thousand customers? Drop in the bucket. Not much to see here.
What happened is 3 substations went offline. Three out of thousands of substations. In the USA we've had larger outages caused by a single squirrel who decided to become charcoal and crawled across the wrong two wires or by some hapless lineman who hit the wrong disconnect in the switchyard.
Heck, I've heard second hand where a couple of theater workers crashed the local grid on purpose back in the late 80's by wiring up every stage light they had and then bumping all the dimmers to full at 2AM. The lights all when bright just before the power shut down. The dramatic and unexpected power surge caused the local grid to disconnect and presto, hundreds of thousand of sleeping customers' power went out. I wasn't there, but I have no reason to doubt their story...
Where this idea that hackers could bring down electric service is troubling, it is not really a significant risk, nor is the way this exploit took place hard to counter. Virus scanners, firewalls, all are commonplace as are "air gapped" data networks used by utility providers in North America. And so 100,000 customers loose power sometime? Big deal. Yea it shouldn't happen, but mistakes get made and equipment sometimes fails. It's not like the restoration of power wasn't possible nearly instantly. The hack didn't cause a pile of expensive equipment to be reduced to junk, or that somebody armed with an RPG launcher (commonly available in the area) couldn't do more damage.
There are much bigger fish to fry here in the risk pool than this; Bigger fish which are much harder to protect from. Just the physical security problem presented by the hundreds of thousand substations is a bigger risk than the risk of hacking attacks. Add to that all the towers holding up the transmission lines running between all those substations. That risk is huge and literally everywhere. Why sweat the small stuff?
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
i've said it once and i'll say it again: what the FUCK is wrong with people who think it's okay to put a country's critical infrastructure on the public internet AT ALL? there should be absolutely no way that power, water, gas, electricity or any kind of public utility should be even VAGUELY "internet connected". to anyone considering responding "but they might want to quotes manage quotes the infrastructure" then they should fucking well have a private closed-loop network or pay key emergency staff to live right next door to the infrastructure. there's a whole boat-load of long-range communications options that don't involve the public internet, which we *know* is wide-open to attack. any country that doesn't have laws in place which make it illegal for critical infrastructure to be on the public internet is quite literally asking for trouble. you don't leave the door to your house unlocked and then complain "but someone stole all my stuff!" - this is exactly the same thing.
...all over again.
I'm still not clear on why anybody thinks it's ok to connect computers that control the power grid to the Internet. Can somebody help me out on this? Sure, smart meters would connected to the net, so you could hack the billing side of the utility. But the actual powerplant and switching station controls? If you're going to control remote switches over the 'net, wouldn't you use a secure tunnel?
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Don't worry comrade, Putin will invade the Luddites once he is done with the Ukraines.
The reason for connecting vital infrastructure systems to the Internet is very simple. Many of those systems are distributed. So you have a choice: build your own network or use existing one (Internet). In most cases building your own network is a no go for many obvious reasons. Like, for example, money, uptime, etc.
57 Americans are currently trying to find a country called Luddael on the map.
Be realistic. There aren't that many who could find their own country.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."