Thursday, July 10, 2014

Cyber Espionage Campaign Hits Energy Companies

Over the past couple of weeks, cybersecurity vendors have announced the uncovering of a successful cyber espionage campaign carried out by the Dragonfy hacking group. In the most recent string of attacks, Dragonfly (also referred to by the name Energetic Bear) has targeted multiple US and European energy companies, successfully looting valuable process information in what appears to be the next step in the cyber warfare campaign against critical infrastructure organizations, after Stuxnet in 2010. Cybersecurity vendors have scrutinized the campaign and presented an analysis of the malware employed by Dragonfy to steal information from the infected computers.

Yesterday, a short paper I co-authored with Security Matters was released. This short paper revisits the main points of this investigation, including additional details into the specifics of the components of the campaign that exploit industrial control systems. This paper also illustrates why the implementation of a defense-in-depth (DiD) strategy is key to successfully counter cyberthreats like Dragonfly. One of the key aspects of improved DiD involves improving situation awareness within industrial architectures. SilentDefense ICS is one key element in the overall process of gaining insight into your ICS architectures allowing early detection and rapid mitigation of cyber threats.

A complete copy of the paper is available by clicking here.

I am currently actively engaged in research of the campaign and the malware employed. In the coming weeks, I will also be releasing another paper that will discuss in details the overall campaign, how the various pieces of the attack are being deployed, and how they are being used against companies relating to industrial automation and control. Stay tuned to SCADAhacker.com and follow watch my Twitter feed for additional release details.

56 comments:

  1. I've always wondered how remotes for electronic devices worked. Now I know, or rather I know the word for it. I just started learning to code and things in the electronic world.
    Feruccio
    http://www.kpsm.com.au/

    ReplyDelete
  2. Thanks Joel, best of luck with the ongoing research and looking forward to the follow-up paper.

    - Josh | Aqua Sierra
    http://aquasierra.com/

    ReplyDelete
  3. I get a lot of great information from this blog. Thanks for sharing this valuable information to our vision. You have posted a trust worthy blog keep sharing.
    best Ethical Hacking Course

    ReplyDelete
  4. It’s my first time to visit this site & I’m really surprised to see such impressive stuff out there.Anne Deschiek

    ReplyDelete
  5. So...forgive my layman's understandin, was this attack actually used on SCADA/Control PLC'S? Or just phishing?

    ReplyDelete
  6. Awesome post you made. It gone viral on the internet. Thanks for providing such helpful stuffs online.
    Plastic Pressure Gauge

    ReplyDelete
  7. Paris airport transfer - Parisairportransfer is very common in Paris that provides facilities to both the businessmen and the tourists. We provide airport transfers from London to any airport in London and also cruise transfer services at very affordable price to our valuable clients.

    Paris taxi
    Paris airport shuttle
    paris hotel transfer
    paris airport transfer
    paris shuttle
    paris car service
    paris airport service
    disneyland paris transfer
    paris airport transportation
    beauvais airport transfer
    taxi beauvais airport
    taxi cdg airport
    taxi orly airport

    ReplyDelete
  8. Thanks, You wrote awesome, I knew lots of things from your article. Its really helpful for any readers.
    Battery Operated Flow Meter

    ReplyDelete
  9. Great post. Thank you for sharing such useful information. Please keep sharing
    PLC SCADA training in Delhi

    ReplyDelete
  10. Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man, Keep it up.
    PLC Scada Course

    ReplyDelete
  11. Our expertise and craftsmanship is well fame and we have an extensive variety of involvement in taking care of the necessities of customers all things considered, either from office or to home. By always procuring the notoriety from our clients we are today viewed as the best office interior designers in coimbatore

    ReplyDelete
  12. Our expertise and craftsmanship is well fame and we have an extensive variety of involvement in taking care of the necessities of customers all things considered, either from office or to home. By always procuring the notoriety from our clients we are today viewed as the best modular kitchen cost in coimbatore

    ReplyDelete
  13. Hello all
    am looking few years that some guys comes into the market
    they called themselves hacker, carder or spammer they rip the
    peoples with different ways and it’s a badly impact to real hacker
    now situation is that peoples doesn’t believe that real hackers and carder scammer exists.
    Anyone want to make deal with me any type am available but first
    I‘ll show the proof that am real then make a deal like

    Available Services

    ..Wire Bank Transfer all over the world

    ..Western Union Transfer all over the world

    ..Credit Cards (USA, UK, AUS, CAN, NZ)

    ..School Grade upgrade / remove Records

    ..Spamming Tool

    ..keyloggers / rats

    ..Social Media recovery

    .. Teaching Hacking / spamming / carding (1/2 hours course)

    discount for re-seller

    Contact: 24/7

    fixitrogers@gmail.com

    ReplyDelete
  14. Nice Blog, Visit for the best SEO Service and Website Designing and Development for your business.
    PPC Company in Delhi

    ReplyDelete
  15. For the best Mutual fund Investment and for the best Mutual fund Schemes Visit Mutualfundwala.
    Mutual Fund Agent
    Mutual Funds India

    ReplyDelete
  16. For best sound and audio engineering course visit our website spingurus.
    audio engineering courses

    ReplyDelete
  17. I feel happy about and learning more about this topic. keep sharing your information regularly for my future reference. This content creates new hope and inspiration within me. Thanks for sharing an article like this. the information which you have provided is better than another blog.
    Best IELTS Coaching institute in Dwarka
    Best IELTS Coaching centre in Dwarka

    ReplyDelete
  18. Thanks for sharing this information and keep updating us.Content is informative and effective. Really it was an awesome article.

    Salesforce training in Noida | Salesforce Consulting Partners | Salesforce Implementation Partner

    ReplyDelete
  19. If you are facing any issue to reach our instititute so here we are mentioning the directions of the institute . Get to know by clicking the link.
    Digital Edge directions

    ReplyDelete
  20. Sirkulasi atau pergerakan permainan poker harus diatasi dengan ideal dalam satu diantara daripada tiga perilaku ialah melalui tangan, waktu ataupun tingkat buta.
    asikqq
    http://dewaqqq.club/
    http://sumoqq.today/
    interqq
    pionpoker
    bandar ceme terpercaya
    betgratis
    paito warna terlengkap
    syair sgp

    ReplyDelete


  21. نجار بالمدينة المنورة
    عندما نتحدث عن نجار بالمدينة المنورة علينا أن نتحدث أولاً إلى المهنة الذي ينتسب لها معلم نجار بالمدينة المنورة، وهي مهنة النجارة التي لا يستغنى عنها الكثير من المنازل في المدينة المنورة، كما أن نجار بالمدينة المنورة هو من يقوم بكثير من الأعمال أهمها فك وتركيب الأثاث وغرف النوم وغرف الأطفال، أيضاً يكون بامكانه تركيب المطابخ والدواليب والخزانات بكافة أنواعها وأشكالها وأحجامها.
    حيث أن نجار بالمدينة المنورة من العمال المتميزين جداً في تنفيذ أعمالهم ويقوم بعمله بذمة وضمير واحتراف وهذا كافي لكي يجعل نجار بالمدينة المنورة من العمال الذي يتم التعامل معهم في كثير من أعمال الصيانة وتصليح الأثاث المستعمل أو في تركيب كافة أنواع الأثاث الجديد ومن ضمنهم أثاث ايكيا الأكثر شهرة في الوقت الحالي.

    ReplyDelete
  22. افضل شركه تنظيف بالرياض شركه الصفرات تقوم الشركه باداء الخدمه على افضل وجه. حيث ان الشركه تمتلك عماله محترفه ومدربه فى كافه الخدمات التى تقدمها الشركه .تقدم شركتنا العماله المتعدده الجنسيات المدربه على احث وسائل واجهزه التنظيف العالميه المتسورده
    تهتم الشركه اهتماما كبيرا براحه العميل والاسره حيث ان الشركه تمتلك احث الاجهزه التى لا تسبب ازعاح افراد الاسره كما ان الشركه تضمن للعميل ضمان الخدمه المتفق عليها مسبقا وبالاسعار المتفق عليها تقدم الشركه لعملائها الكرام خصومات تصل الى 30%
    طواااااااااال العام شركه الصفرات جائت بكافه الخدمات من اجل سعادتك وعدم انشغالك بخدمات التنظيف. الشركه مسؤله عن كافه متتطلبات التنظيف ولا تطلب من العميل اى شي .اهم ما يميز شركتنا هى سرعه استجابه طلب الخدمه فى كافحه انحاء الرياض الشركه
    تعمل طوال الاربعه وعشرون ساعه يوميا شركه الصفرات من اضمن الشركات بالرياض على الاطلاق من حيث العماله وادوات واجهزه التنظيف ومواد العزل وادوات كشف التسريبات تمتلك الشركه افض انواع المنظفات المستورده شركه الصفرات فى خدمتك وخدمه اسرتك فى اى
    .وقت كل ما عليك هو التواصل مع مندوبنا عبر الارقام الموضحه سيصك فريق العمل المتخصص بافضل المعدات لأداء الخدمه المطلوبه
    شركة الصفرات لتنظيف المنازل بالرياض
    شركة الصفرات لعزل الاسطح بالرياض
    شركة الصفرات لتنظيف المجالس بالرياض
    شركة الصفرات لتنظيف السجاد بالرياض
    شركة الصفرات لنقل الاثاث بالرياض
    شركة الصفرات لمكافحة الحشرات بالرياض
    شركة الصفرات لكشف التسربات بالرياض
    شركة الصفرات لتنظيف المسابح بالرياض
    شركة الصفرات لتنظيف الخزانات بالرياض
    شركة الصفرات لتسليك المجاري بالرياض

    ReplyDelete
  23. Usually I never comment on blogs but your article is so convincing that I never stop myself to say something about it. You’re doing a great job Man,Keep it up.
    best study abroad consultants in delhi
    ielts coaching in gurgaon

    ReplyDelete
  24. I am so happy after read your blog. It’s very useful blog for us.

    Python Corporate training in Tanzania

    ReplyDelete
  25. Nice blog, thanks for sharing this. If you need a professional website development services in delhi, Dial Web India is best for you.
    Best Website Development Company in India

    ReplyDelete
  26. Sarswati Enterprises provides the high-quality Screw Caps Making Machinery and Aluminum Caps Making Machinery at a low budget.
    Aluminum Caps Making Machinery

    ReplyDelete
  27. I want to share a testimony on how Le_Meridian funding service helped me with loan of 2,000,000.00 USD to finance my marijuana farm project , I'm very grateful and i promised to share this legit funding company to anyone looking for way to expand his or her business project.the company is UK/USA funding company. Anyone seeking for finance support should contact them on lfdsloans@outlook.com Or lfdsloans@lemeridianfds.com Mr Benjamin is also on whatsapp 1-989-394-3740 to make things easy for any applicant. 

    ReplyDelete
  28. hey...It is highly comprehensive and elaborated. Thanks for sharing!

    Localebazar- Your single guide for exploring delicious foods, travel diaries and fitness stories.

    Visit us for more- localebazar.com

    ReplyDelete
  29. Hey.. Well explained... provides a lot of knowledge... Thanks for sharing !!
    Check this out https://exploring2gether.com/red-sauce-pasta-recipe/

    ReplyDelete
  30. Very well explained and easy to understand. Thanks for sharing !!!!
    https://exploring2gether.com/shopping-places-in-delhi-that-are-worth-checking-out/

    ReplyDelete
  31. Fine way of telling, and pleasant post. Nice info! Thanks a lot for sharing it, that’s truly has added a lot to our knowledge about this topic. Have a more successful day. Amazing write-up, always find something interesting.
    Thanks

    ReplyDelete
  32. Nice, placed more blog for this related information. Visit Meritidevisa, the leading immigration consultants in Delhi, India.
    Best Immigration Consultants in Delhi

    ReplyDelete
  33. Nice blog, thanks for sharing this. Noble IVF is of the leading Test Tube Baby Centre in Aligarh. For more information visit our website.
    Test Tube Baby Centre in Aligarh

    ReplyDelete
  34. Wonderful information! It was very informative. keep sharing it will help others too.
    if you want to learn French Lanaguage you can vist us at https://www.classesofprofessionals.com/french-language-institute-delhi

    ReplyDelete

  35. Thanks For writing such great content and help us to learn much more.
    Please visit my content on Digital Marketing in Karol Bagh and share your review.

    Thanks in Advance

    ReplyDelete
  36. Get the Designer Laddu Gopal Poshak and Laddu Gopal Mukut Mala at affordable prices at amfez. Visit our website for more information-
    Laddu Gopal Mukut Mala

    ReplyDelete
  37. it was great experience after reading this. thanks for sharing such good stuff with us.
    i also wrote on makeup course in Delhi.
    Please share your reviews.

    ReplyDelete
  38. Thanks for sharing such a good content with us. keep share these kind of content.i would like to read more.
    please review my writeup too -
    Digital Marking Course in Patel Nagar

    ReplyDelete
  39. Keep it up for more updates. Protrek Adventure leading the Best Trekking Company in India provides Annapurna Base Camp Trek, one of the best camp treks in Annapurna region.
    Best Trekking Company in India

    ReplyDelete
  40. Amazing blog, thank you so much for sharing this blog. Visit Gribety Detective India for professional Detective Agency in Jaipur.
    Detective Agency in Jaipur

    ReplyDelete
  41. I simply could not leave your site before sharing my reviews that i actually loved the information you shared here.i also would like to invite you to share your review on my content- IELTS coaching in Delhi

    ReplyDelete