U.S. warns of cyberattacks on water, power

WASHINGTON — The U.S. government on Thursday warned of a heightened risk of a cyberattack that could disrupt the control systems of U.S. companies providing critical services such as electricity and water.

Officials are highly concerned about “increasing hostility” against “U.S. critical infrastructure organizations,” according to the warning, which was released by the Department of Homeland Security on a computer network accessible only to authorized industry and government users. “Adversary intent extends beyond intellectual property theft to include the use of cyber to disrupt … control processes.”

Senior U.S. officials have warned in recent months that foreign adversaries are probing computer systems that operate chemical, electric and water plants. But they are also increasingly concerned about the threat of a potentially destructive cyberattack.

Such attacks are rare. Last summer, more than 30,000 computers at the state-owned oil company Saudi Aramco were destroyed when a virus wiped data from the hard drives. The same virus also damaged computer systems at Ras Gas, an energy company in Qatar.

U.S. intelligence officials have said they think those attacks were linked to the Iranian government. Saudi Arabia and Qatar are allied with Western powers that have tightened economic and oil sanctions against Iran in an effort to slow Iran’s nuclear program.

DHS officials did not provide details on the nature of the latest threat, but there has been renewed concern among government and industry officials about cyber-activity out of the Middle East, particularly Iran.

“There have been oil and gas companies that have seen increased activity out of Iran – not just U.S. but overseas companies,” said one industry official who was not authorized to speak for the record.

The unclassified alert issued Thursday was released by DHS’s Industrial Control Systems Cyber Emergency Response Team, or ICS-CERT. The agency helps companies investigate intrusions and suggests ways to improve security. In doing so, it collects data about cyber-threats that it can use to alert the private sector.

The alert comes as the Obama administration is ramping up efforts to share more information about threats and encourage greater computer network security. In February, President Obama issued an executive order directing federal agencies to provide more cyber-threat data to industry more quickly.

“This is the sort of information-sharing that everyone’s talking about doing so we can protect critical infrastructure,” said Evan Wolff, a partner at Hunton &Williams and a former DHS adviser who works with industry.

The 13-page alert included specific measures that could be taken to prevent disruptive attacks, industry officials said. It included detailed descriptions of tactics and techniques used to gain access to computers, passwords and various levels of a company’s network. A separate document provided indicators of compromise that can be used by technicians to detect attacks.

“The type of information and detail that DHS is now delivering in these intelligence reports to the community has dramatically improved in the last 18 months,” said Tim Conway, a technical director of the Bethesda, Md.-based SANS Institute, a cyber-training organization that helps companies deflect attacks.

Conway, who worked for more than a decade with the electric sector, said industry officials long demanded for such information from the government. “This is exactly what we’ve been wanting,” he said.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Trader Joe’s customers walk in and out of the store on Monday, Nov. 20, 2023 in Everett, Washington. (Olivia Vanni / The Herald)
New Trader Joe’s opens this week at Everett Mall

It’s a short move from a longtime location, essentially across the street, where parking was often an adventure.

Ian Bramel-Allen enters a guilty plea to second-degree murder during a plea and sentencing hearing on Wednesday, March 6, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
‘Deep remorse’: Man gets 17 years for friend’s fatal stabbing in Edmonds

Ian Bramel-Allen, 44, pleaded guilty Wednesday to second-degree murder for killing Bret Northcutt last year at a WinCo.

Firefighters respond to a small RV and a motorhome fire on Tuesday afternoon in Marysville. (Provided by Snohomish County Fire Distrct 22)
1 injured after RV fire, explosion near Marysville

The cause of the fire in the 11600 block of 81st Avenue NE had not been determined, fire officials said.

Ashton Dedmon appears in court during his sentencing hearing on Tuesday, March 5, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
Everett Navy sailor sentenced to 90 days for fatal hit and run

Ashton Dedmon crashed into Joshua Kollman and drove away. Dedmon, a petty officer on the USS Kidd, reported he had a panic attack.

A kindergarten student works on a computer at Emerson Elementary School on Wednesday, Feb. 28, 2024, in Everett, Washington. (Ryan Berry / The Herald)
‘¡Una erupción!’: Dual language programs expanding to 10 local schools

A new bill aims to support 10 new programs each year statewide. In Snohomish County, most follow a 90-10 model of Spanish and English.

Logo for news use featuring the Tulalip Indian Reservation in Snohomish County, Washington. 220118
Woman drives off cliff, dies on Tulalip Reservation

The woman fell 70 to 80 feet after driving off Priest Point Drive NW on Sunday afternoon.

Everett
Boy, 4, survives fall from Everett fourth-story apartment window

The child was being treated at Seattle Children’s. The city has a limited supply of window stops for low-income residents.

People head out to the water at low tide during an unseasonably warm day on Saturday, March 16, 2024, at Lighthouse Park in Mukilteo, Washington. (Ryan Berry / The Herald)
Everett shatters record high temperature by 11 degrees

On Saturday, it hit 73 degrees, breaking the previous record of 62 set in 2007.

Snohomish County Fire District #4 and Snohomish Regional Fire & Rescue respond to a motor vehicle collision for a car and pole. The driver was pronounced dead at the scene, near Triangle Bait & Tackle in Snohomish. (Snohomish County Sheriff’s Office)
Police: Troopers tried to stop driver before deadly crash in Snohomish

The man, 31, was driving at “a high rate of speed” when he crashed into a traffic light pole and died, investigators said.

Alan Dean, who is accused of the 1993 strangulation murder of 15-year-old Bothell girl Melissa Lee, appears in court during opening statements of his trial on Monday, March 18, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
31 years later, trial opens in Bothell teen’s brutal killing

In April 1993, Melissa Lee’s body was found below Edgewater Creek Bridge. It would take 27 years to arrest Alan Dean in her death.

Logo for news use featuring the municipality of Snohomish in Snohomish County, Washington. 220118
Man dies after crashing into pole in Snohomish

Just before 1 a.m., the driver crashed into a traffic light pole at the intersection of 2nd Street and Maple Avenue.

Bodies of two men recovered after falling into Eagle Falls near Index

Two men fell into the falls and did not resurface Saturday, authorities said. After a recovery effort, two bodies were found.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.