Researchers Found a Hacking Tool that Targets Energy Grids on the Dark Web (vice.com)

An anonymous reader writes: A sophisticated piece of government-made malware, designed to do reconnaissance on energy grid's system ahead of an eventual cyberattack on critical infrastructure, was found on a dark web hacking forum. SentinelOne's researchers believe the malware was created by a team of hackers working for a government, likely from eastern Europe, according to a report published on Tuesday. Udi Shamir, chief security officer at SentinelOne, said that it's normal to find reused code and malware on forums because "nobody tries to reinvent the wheel again and again and again." But in this case, "it was very surprising to see such a sophisticated sample" appear in hacking forums, he told Motherboard in a phone interview.

Comments

Repeat after me....

[Lumpy]

If a power control system or any other important infrastructure has it's SCADA system connected over the internet or even TO the internet....

The people in charge of it are MORONS.

There is ZERO reason to use the internet as your data systems for control interconnected. quit being cheap assholes and use private point to point. on an air gapped network.. And while you are at it HIRE COMPETENT ITSEC PEOPLE. Not Ex cops, those guys dont know shit about computer security...