U.S. warns of cyberattacks on water, power

WASHINGTON — The U.S. government on Thursday warned of a heightened risk of a cyberattack that could disrupt the control systems of U.S. companies providing critical services such as electricity and water.

Officials are highly concerned about “increasing hostility” against “U.S. critical infrastructure organizations,” according to the warning, which was released by the Department of Homeland Security on a computer network accessible only to authorized industry and government users. “Adversary intent extends beyond intellectual property theft to include the use of cyber to disrupt … control processes.”

Senior U.S. officials have warned in recent months that foreign adversaries are probing computer systems that operate chemical, electric and water plants. But they are also increasingly concerned about the threat of a potentially destructive cyberattack.

Such attacks are rare. Last summer, more than 30,000 computers at the state-owned oil company Saudi Aramco were destroyed when a virus wiped data from the hard drives. The same virus also damaged computer systems at Ras Gas, an energy company in Qatar.

U.S. intelligence officials have said they think those attacks were linked to the Iranian government. Saudi Arabia and Qatar are allied with Western powers that have tightened economic and oil sanctions against Iran in an effort to slow Iran’s nuclear program.

DHS officials did not provide details on the nature of the latest threat, but there has been renewed concern among government and industry officials about cyber-activity out of the Middle East, particularly Iran.

“There have been oil and gas companies that have seen increased activity out of Iran – not just U.S. but overseas companies,” said one industry official who was not authorized to speak for the record.

The unclassified alert issued Thursday was released by DHS’s Industrial Control Systems Cyber Emergency Response Team, or ICS-CERT. The agency helps companies investigate intrusions and suggests ways to improve security. In doing so, it collects data about cyber-threats that it can use to alert the private sector.

The alert comes as the Obama administration is ramping up efforts to share more information about threats and encourage greater computer network security. In February, President Obama issued an executive order directing federal agencies to provide more cyber-threat data to industry more quickly.

“This is the sort of information-sharing that everyone’s talking about doing so we can protect critical infrastructure,” said Evan Wolff, a partner at Hunton &Williams and a former DHS adviser who works with industry.

The 13-page alert included specific measures that could be taken to prevent disruptive attacks, industry officials said. It included detailed descriptions of tactics and techniques used to gain access to computers, passwords and various levels of a company’s network. A separate document provided indicators of compromise that can be used by technicians to detect attacks.

“The type of information and detail that DHS is now delivering in these intelligence reports to the community has dramatically improved in the last 18 months,” said Tim Conway, a technical director of the Bethesda, Md.-based SANS Institute, a cyber-training organization that helps companies deflect attacks.

Conway, who worked for more than a decade with the electric sector, said industry officials long demanded for such information from the government. “This is exactly what we’ve been wanting,” he said.

More in Local News

A customer walks away after buying a hot dog from a vendor on 33rd St and Smith Street near the Everett Station on Friday. The Everett Station District Alliance pictures the area east of Broadway and south of Hewitt Avenue as a future neighborhood and transit hub that could absorb expected population growth. (Andy Bronson / The Herald)
How can Everett Station become a vibrant part of city?

A neighborhood alliance focused on long-term revitalization will update the public Tuesday.

Man arrested after police find van full of drugs, cash and guns

An officer on patrol noticed a vehicle by itself in the middle of a WinCo parking lot at 2 a.m.

After work to address issues, Lynnwood gets clean audit

The city has benefited from increased revenues from sales tax.

Bolshevik replaces BS in Eyman’s voters pamphlet statement

The initiative promoter also lost a bid to include a hyperlink to online coverage of the battle.

Man with shotgun confronts man on toilet about missing phone

Police say the victim was doing his business when the suspect barged in and threatened him.

Detectives seek suspect in woman’s homicide

Alisha Michelle Canales-McGuire was shot to death Wednesday at a home south of Paine Field.

Car crashes near Everett after State Patrol pursuit

The driver and a second person in the car suffered injuries.

Voter registration deadline looms

Oct. 30 is the deadline for new voter registrations prior to the General Election.

This week’s Herald Super Kid is Nathan Nicholson of Snohomish High School. (Dan Bates / The Herald)
One driven Panther

Snohomish senior Nathan Nicholson a student leader, social media master.

Most Read