Thursday, July 10, 2014

Cyber Espionage Campaign Hits Energy Companies

Over the past couple of weeks, cybersecurity vendors have announced the uncovering of a successful cyber espionage campaign carried out by the Dragonfy hacking group. In the most recent string of attacks, Dragonfly (also referred to by the name Energetic Bear) has targeted multiple US and European energy companies, successfully looting valuable process information in what appears to be the next step in the cyber warfare campaign against critical infrastructure organizations, after Stuxnet in 2010. Cybersecurity vendors have scrutinized the campaign and presented an analysis of the malware employed by Dragonfy to steal information from the infected computers.

Yesterday, a short paper I co-authored with Security Matters was released. This short paper revisits the main points of this investigation, including additional details into the specifics of the components of the campaign that exploit industrial control systems. This paper also illustrates why the implementation of a defense-in-depth (DiD) strategy is key to successfully counter cyberthreats like Dragonfly. One of the key aspects of improved DiD involves improving situation awareness within industrial architectures. SilentDefense ICS is one key element in the overall process of gaining insight into your ICS architectures allowing early detection and rapid mitigation of cyber threats.

A complete copy of the paper is available by clicking here.

I am currently actively engaged in research of the campaign and the malware employed. In the coming weeks, I will also be releasing another paper that will discuss in details the overall campaign, how the various pieces of the attack are being deployed, and how they are being used against companies relating to industrial automation and control. Stay tuned to and follow watch my Twitter feed for additional release details.


  1. I've always wondered how remotes for electronic devices worked. Now I know, or rather I know the word for it. I just started learning to code and things in the electronic world.

  2. Thanks Joel, best of luck with the ongoing research and looking forward to the follow-up paper.

    - Josh | Aqua Sierra

  3. I get a lot of great information from this blog. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.
    best Ethical Hacking Course

  4. It’s my first time to visit this site & I’m really surprised to see such impressive stuff out there.Anne Deschiek

  5. So...forgive my layman's understandin, was this attack actually used on SCADA/Control PLC'S? Or just phishing?

  6. Awesome post you made. It gone viral on the internet. Thanks for providing such helpful stuffs online.
    Plastic Pressure Gauge

  7. Paris airport transfer - Parisairportransfer is very common in Paris that provides facilities to both the businessmen and the tourists. We provide airport transfers from London to any airport in London and also cruise transfer services at very affordable price to our valuable clients.

    Paris taxi
    Paris airport shuttle
    paris hotel transfer
    paris airport transfer
    paris shuttle
    paris car service
    paris airport service
    disneyland paris transfer
    paris airport transportation
    beauvais airport transfer
    taxi beauvais airport
    taxi cdg airport
    taxi orly airport

  8. Thanks, You wrote awesome, I knew lots of things from your article. Its really helpful for any readers.
    Battery Operated Flow Meter

  9. Great post. Thank you for sharing such useful information. Please keep sharing
    PLC SCADA training in Delhi

  10. Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man, Keep it up.
    PLC Scada Course

  11. Our expertise and craftsmanship is well fame and we have an extensive variety of involvement in taking care of the necessities of customers all things considered, either from office or to home. By always procuring the notoriety from our clients we are today viewed as the best office interior designers in coimbatore

  12. Our expertise and craftsmanship is well fame and we have an extensive variety of involvement in taking care of the necessities of customers all things considered, either from office or to home. By always procuring the notoriety from our clients we are today viewed as the best modular kitchen cost in coimbatore

  13. Hello all
    am looking few years that some guys comes into the market
    they called themselves hacker, carder or spammer they rip the
    peoples with different ways and it’s a badly impact to real hacker
    now situation is that peoples doesn’t believe that real hackers and carder scammer exists.
    Anyone want to make deal with me any type am available but first
    I‘ll show the proof that am real then make a deal like

    Available Services

    ..Wire Bank Transfer all over the world

    ..Western Union Transfer all over the world

    ..Credit Cards (USA, UK, AUS, CAN, NZ)

    ..School Grade upgrade / remove Records

    ..Spamming Tool

    ..keyloggers / rats

    ..Social Media recovery

    .. Teaching Hacking / spamming / carding (1/2 hours course)

    discount for re-seller

    Contact: 24/7

  14. Nice Blog, Visit for the best SEO Service and Website Designing and Development for your business.
    PPC Company in Delhi

  15. For the best Mutual fund Investment and for the best Mutual fund Schemes Visit Mutualfundwala.
    Mutual Fund Agent
    Mutual Funds India

  16. For best sound and audio engineering course visit our website spingurus.
    audio engineering courses

  17. I feel happy about and learning more about this topic. keep sharing your information regularly for my future reference. This content creates new hope and inspiration within me. Thanks for sharing an article like this. the information which you have provided is better than another blog.
    Best IELTS Coaching institute in Dwarka
    Best IELTS Coaching centre in Dwarka

  18. Thanks for sharing this information and keep updating us.Content is informative and effective. Really it was an awesome article.

    Salesforce training in Noida | Salesforce Consulting Partners | Salesforce Implementation Partner

  19. If you are facing any issue to reach our instititute so here we are mentioning the directions of the institute . Get to know by clicking the link.
    Digital Edge directions

  20. Sirkulasi atau pergerakan permainan poker harus diatasi dengan ideal dalam satu diantara daripada tiga perilaku ialah melalui tangan, waktu ataupun tingkat buta.
    bandar ceme terpercaya
    paito warna terlengkap
    syair sgp


  21. نجار بالمدينة المنورة
    عندما نتحدث عن نجار بالمدينة المنورة علينا أن نتحدث أولاً إلى المهنة الذي ينتسب لها معلم نجار بالمدينة المنورة، وهي مهنة النجارة التي لا يستغنى عنها الكثير من المنازل في المدينة المنورة، كما أن نجار بالمدينة المنورة هو من يقوم بكثير من الأعمال أهمها فك وتركيب الأثاث وغرف النوم وغرف الأطفال، أيضاً يكون بامكانه تركيب المطابخ والدواليب والخزانات بكافة أنواعها وأشكالها وأحجامها.
    حيث أن نجار بالمدينة المنورة من العمال المتميزين جداً في تنفيذ أعمالهم ويقوم بعمله بذمة وضمير واحتراف وهذا كافي لكي يجعل نجار بالمدينة المنورة من العمال الذي يتم التعامل معهم في كثير من أعمال الصيانة وتصليح الأثاث المستعمل أو في تركيب كافة أنواع الأثاث الجديد ومن ضمنهم أثاث ايكيا الأكثر شهرة في الوقت الحالي.

  22. افضل شركه تنظيف بالرياض شركه الصفرات تقوم الشركه باداء الخدمه على افضل وجه. حيث ان الشركه تمتلك عماله محترفه ومدربه فى كافه الخدمات التى تقدمها الشركه .تقدم شركتنا العماله المتعدده الجنسيات المدربه على احث وسائل واجهزه التنظيف العالميه المتسورده
    تهتم الشركه اهتماما كبيرا براحه العميل والاسره حيث ان الشركه تمتلك احث الاجهزه التى لا تسبب ازعاح افراد الاسره كما ان الشركه تضمن للعميل ضمان الخدمه المتفق عليها مسبقا وبالاسعار المتفق عليها تقدم الشركه لعملائها الكرام خصومات تصل الى 30%
    طواااااااااال العام شركه الصفرات جائت بكافه الخدمات من اجل سعادتك وعدم انشغالك بخدمات التنظيف. الشركه مسؤله عن كافه متتطلبات التنظيف ولا تطلب من العميل اى شي .اهم ما يميز شركتنا هى سرعه استجابه طلب الخدمه فى كافحه انحاء الرياض الشركه
    تعمل طوال الاربعه وعشرون ساعه يوميا شركه الصفرات من اضمن الشركات بالرياض على الاطلاق من حيث العماله وادوات واجهزه التنظيف ومواد العزل وادوات كشف التسريبات تمتلك الشركه افض انواع المنظفات المستورده شركه الصفرات فى خدمتك وخدمه اسرتك فى اى
    .وقت كل ما عليك هو التواصل مع مندوبنا عبر الارقام الموضحه سيصك فريق العمل المتخصص بافضل المعدات لأداء الخدمه المطلوبه
    شركة الصفرات لتنظيف المنازل بالرياض
    شركة الصفرات لعزل الاسطح بالرياض
    شركة الصفرات لتنظيف المجالس بالرياض
    شركة الصفرات لتنظيف السجاد بالرياض
    شركة الصفرات لنقل الاثاث بالرياض
    شركة الصفرات لمكافحة الحشرات بالرياض
    شركة الصفرات لكشف التسربات بالرياض
    شركة الصفرات لتنظيف المسابح بالرياض
    شركة الصفرات لتنظيف الخزانات بالرياض
    شركة الصفرات لتسليك المجاري بالرياض

  23. Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man,Keep it up.
    best study abroad consultants in delhi
    ielts coaching in gurgaon

  24. I am so happy after read your blog. It’s very useful blog for us.

    Python Corporate training in Tanzania

  25. Nice blog, thanks for sharing this. If you need a professional website development services in delhi, Dial Web India is best for you.
    Best Website Development Company in India

  26. Sarswati Enterprises provides the high-quality Screw Caps Making Machinery and Aluminum Caps Making Machinery at a low budget.
    Aluminum Caps Making Machinery

  27. I want to share a testimony on how Le_Meridian funding service helped me with loan of 2,000,000.00 USD to finance my marijuana farm project , I'm very grateful and i promised to share this legit funding company to anyone looking for way to expand his or her business project.the company is UK/USA funding company. Anyone seeking for finance support should contact them on Or Mr Benjamin is also on whatsapp 1-989-394-3740 to make things easy for any applicant. 

  28. hey...It is highly comprehensive and elaborated. Thanks for sharing!

    Localebazar- Your single guide for exploring delicious foods, travel diaries and fitness stories.

    Visit us for more-

  29. Hey.. Well explained... provides a lot of knowledge... Thanks for sharing !!
    Check this out

  30. Very well explained and easy to understand. Thanks for sharing !!!!

  31. Fine way of telling, and pleasant post. Nice info! Thanks a lot for sharing it, that’s truly has added a lot to our knowledge about this topic. Have a more successful day. Amazing write-up, always find something interesting.

  32. Nice, placed more blog for this related information. Visit Meritidevisa, the leading immigration consultants in Delhi, India.
    Best Immigration Consultants in Delhi

  33. Nice blog, thanks for sharing this. Noble IVF is of the leading Test Tube Baby Centre in Aligarh. For more information visit our website.
    Test Tube Baby Centre in Aligarh

  34. Wonderful information! It was very informative. keep sharing it will help others too.
    if you want to learn French Lanaguage you can vist us at


  35. Thanks For writing such great content and help us to learn much more.
    Please visit my content on Digital Marketing in Karol Bagh and share your review.

    Thanks in Advance

  36. Get the Designer Laddu Gopal Poshak and Laddu Gopal Mukut Mala at affordable prices at amfez. Visit our website for more information-
    Laddu Gopal Mukut Mala

  37. it was great experience after reading this. thanks for sharing such good stuff with us.
    i also wrote on makeup course in Delhi.
    Please share your reviews.

  38. Thanks for sharing such a good content with us. keep share these kind of content.i would like to read more.
    please review my writeup too -
    Digital Marking Course in Patel Nagar

  39. Keep it up for more updates. Protrek Adventure leading the Best Trekking Company in India provides Annapurna Base Camp Trek, one of the best camp treks in Annapurna region.
    Best Trekking Company in India

  40. Amazing blog, thank you so much for sharing this blog. Visit Gribety Detective India for professional Detective Agency in Jaipur.
    Detective Agency in Jaipur

  41. I simply could not leave your site before sharing my reviews that i actually loved the information you shared here.i also would like to invite you to share your review on my content- IELTS coaching in Delhi


  42. Thanks for sharing such helpful information with us I appreciate your effort of writing a value able piece.
    i also write on Spanish Language Course in Delhi.
    Please share your review on that.

  43. Nice post, this post clears my doubtful question and abundance of knowledge. I would like to see more articles/blogs. I am also a content writer and writing a blog about the Canada Work Visa you can review it.

  44. Thanks for Sharing a very Nice Post & It’s really helpful for everyone. Keep on updating these kinds of
    Informative things Otherwise If anyone Want to Learn SAP Training Course Basic to Adv. Level So Contact THERE- 9599118710

    Some Best SAP Training Center in Delhi, India

    sap training institute in delhi
    sap training center in delhi
    sap training in delhi
    sap course in delhi

  45. Want to make your own website!!!
    Contact Essencesoftwares the best website development company in Gurgaon.
    Essence Softwares provides: Website Development Services, App Development Services, Digital Marketing Services, IoT Solutions Services and Startup Consulting Services.
    Web Development Company in Gurgaon

  46. Incredible Posts...It's very interesting to Read all your Articles,it seems to be helpful to everyone...Looking towards more like this...
    Java training in chennai | Java training in annanagar | Java training in omr | Java training in porur | Java training in tambaram | Java training in velachery

  47. Nice blog. Mykanha provides the top quality Laddu Gopal Dress, Kanha Ji Dress and Laddu Gopal Flute at the best price in India. For more information visit our website.
    Laddu Gopal Singhasan
    Laddu Gopal Shringar
    Ladoo Gopal Ji
    Laddu Gopal Winter Dress
    Bal Gopal Jhula Laddu Gopal Ji Dresses
    Ladoo Gopal Clothes
    Thakur Ji Bansuri
    Dress For Bal Gopal


    Get $10,050 USD every week, for six months!

    See how it works
    Do you know you can hack into any ATM machine with a hacked ATM card??
    Make up you mind before applying, straight deal...
    Order for a blank ATM card now and get millions within a week!: contact us
    via email address:: or whats-app +1(323)-723-2568

    We have specially programmed ATM cards that can be use to hack ATM
    machines, the ATM cards can be used to withdraw at the ATM or swipe, at
    stores and POS. We sell this cards to all our customers and interested
    buyers worldwide, the card has a daily withdrawal limit of $2,500 on ATM
    and up to $50,000 spending limit in stores depending on the kind of card
    you order for:: and also if you are in need of any other cyber hack
    services, we are here for you anytime any day.
    Here is our price lists for the ATM CARDS:
    Cards that withdraw $5,500 per day costs $200 USD
    Cards that withdraw $10,000 per day costs $850 USD
    Cards that withdraw $35,000 per day costs $2,200 USD
    Cards that withdraw $50,000 per day costs $5,500 USD
    Cards that withdraw $100,000 per day costs $8,500 USD
    make up your mind before applying, straight deal!!!

    The price include shipping fees and charges, order now: contact us via
    email or whats-app +1(323)-723-2568

  49. Get A Blank ATM CARD And Cash Good Money/Funds Pay Your Debt directly today in any ATM machine around you anywhere in the world. contact It's 100% guaranteed secure with no worries of being caught because the blank card it's already programmed and loaded with good funds in it, in such a way that's not traceable which also have a technique that makes it impossible for the CCTV to detect you, i am not a stupid man that i will come out to the public and start saying what someone have not done. For more info contact Mr john and also on how you are going to get your Card, Order yours today via Email:

    Blog Site:

    WhatsApp +13013596832