A group of hackers has targeted US and Inexperienced Experience Of The Summer (2015)European energy companies in an extended campaign that has, in some instances, led to cybersecurity breaches that expose the systems that control companies' operations. The attacks were outlined in a new report from Symantec.
The report claims that attacks have allowed the hackers to bypass the security of energy firms in the US, Turkey, and Switzerland, while companies in other countries are thought to have been affected. The hackers appear to have used multiple methods to access target networks, including malicious emails, watering hole attacks, and Trojanized software.
The attacks use similar tactics to a group known as Dragonfly, which Symantec says has been active dating back to 2011 and was responsible for a wave of attacks discovered by security researchers in 2014. The cybersecurity firm is calling the latest attacks, which appear to have begun in Dec. 2015 before a "distinct increase in activity in 2017," the Dragonfly 2.0 campaign.
SEE ALSO: Lenovo settles with the FTC for pre-installing dangerous adware on its computersThe group is thought to be tied to the Russian government, but there's no proof beyond speculation and a few lines of Russian code strings in the malware discovered by researchers. Some code strings were in French, however, so Symantec is wary of language being used as a false flag to throw researchers off the trail of the attackers' origins.
The report says that the hackers appear to have expanded the scope of their operations for Dragonfly 2.0. The original Dragonfly campaigns were more of an "exploratory phase," in which the group was probing for access into the energy sector, while the current phase of attacks is more focused on gaining a foothold to potentially disrupt energy systems.
Symantec believes that screen captures found in the hackers' possession prove that they might be able to gain control of the power systems if they so choose. The the files were tagged with "cntrl" possibly indicating that the machines in question could access to operational systems.
The potential for these hacks to take a toll in the real world is all too close. Symantec analyst Eric Chien believes the only barrier between the hackers and an attack on real-world energy systems is a reason to flip the switch.
“We’re now talking about on-the-ground technical evidence this could happen in the US, and there’s nothing left standing in the way except the motivation of some actor out in the world," he told Wired.
Attacks on power grids aren't exactly a new phenomenon. Nuclear facilities in the US were targeted by hackers back in July, but there was no proof that the malicious actors were able to gain access to the operational systems. Energy companies in Ukraine weren't so lucky, however: Hackers actually cut the power in 2015 and 2016.
Topics Cybersecurity
Previous:2016's $400 GPU vs. 2019's $400 GPUs
Next:Art for Earth’s Sake
The Morning News Roundup for December 2, 2014William Meredith’s “Parents” by Dan PiepenbringAn Interview with Julia WertzWordle today: Here's the answer and hints for September 7A Microinterview with Nell ZinkUnpacking a medical meme: How does ibuprofen know where the pain is?How 'Instagram therapy' helps normalize Latinx mental healthcareThis Week’s Staff PicksThe Morning News Roundup for December 2, 2014Who Are These Future RockDictionary.com update: 'they' becomes the default over 'he or she'Influencers aren't going anywhere. So what does that mean for today's teens?A Marvelous Crutch: An Interview with Brad ZellarI tried the viral TikTok adjustable buttons and they actually work pretty wellUnpacking a medical meme: How does ibuprofen know where the pain is?An Interview with Michael HofmannThe Morning News Roundup for December 4, 2014The Poetry of Julia A. MooreThe Morning News Roundup for December 1, 2014Duolingo is adding music lessons to the syllabus Today's Hurdle hints and answers for June 21, 2025 Moon phase today explained: What the moon will look like on June 21, 2025 MotoGP 2025 livestream: How to watch MotoGP World Championship for free Best gaming deal: Get the Lenovo Legion Go for $200 off at Amazon Creator Naomi Hearts shares her go Real Madrid vs. CF Pachuca 2025 livestream: Watch Club World Cup for free England vs. India 2025 livestream: Watch Test 1 of India Tour of England for free Today's NYT mini crossword answers for June 21, 2025 The 5 best smartphones of 2025 so far Mamelodi Sundowns vs. Borussia Dortmund 2025 livestream: Watch Club World Cup for free Bad actors: YouTube ads have an AI video problem NYT Connections hints and answers for June 21: Tips to solve 'Connections' #741. Today's Hurdle hints and answers for June 22, 2025 Jenny Hoyos shares the secret to turning YouTube views into a business Moon phase today explained: What the moon will look like on June 22, 2025 Yes, 16 billion passwords leaked. No, it's not what you think. The Real Nvidia GPU Lineup: GeForce RTX 5060 is Actually a Mediocre 5050 Best Switch game deal: Get 'Super Mario 3D World + Bowser's Fury' VidCon 2025 highlights: Updates on Rhett & Link, Haliey Welch, Aphmau, and more In Memoriam: The tech that died in 2025 (so far)
2.0826s , 8215.5625 kb
Copyright © 2025 Powered by 【Inexperienced Experience Of The Summer (2015)】,Information Information Network