Oak Ridge National Lab shuts down Internet, email after cyberattack

JRViejo · Apr 19, 2011

The attacks were launched through phishing emails that were sent to some 573 lab employees. The emails were disguised to appear like it came from the lab's HR department and purported to inform employees of some benefits related changes.

The emails contained a link that employees were asked to click on for further information.

Some employees appear to have clicked on the link resulting in an information-stealing malware program being downloaded on their systems.
Click to expand...

Computerworld Article By Jaikumar Vijayan.

ronjor · Apr 19, 2011

Related.

by Elinor Mills

Cyber attacks on critical infrastructure companies are on the rise, with a jump in extortion attempts and malware designed to sabotage systems, like Stuxnet, according to a new report.

While attacks are increasing, many companies aren't doing enough to protect their systems and are instead rushing to adopt new technologies--such as Smart Grid--without ensuring they adequately secure against cyber attacks, concludes "In the Dark: Crucial Industries Confront Cyberattacks."

The report, due to be released on Tuesday, was commissioned by McAfee and written by the Center for Strategic and International Studies (CSIS). It includes results from an electronic survey of 200 IT security executives from firms that provide oil, gas, electricity, water, and sewage services in 14 countries during the last quarter of 2010.
Click to expand...

http://news.cnet.com/8301-27080_3-20055091-245.html

Baserk · Apr 20, 2011

From 'SecurityNewsDaily'; 57 out of some 530 employees clicked on a link in the email 'campaign', according to Thomas Zacharia, ORNL deputy lab director. link

Quite a staggering percentage, if over 10% of employees (of a hush-hush US lab) who received the email, have been seriously duped by 'PLA & Associates Co.' (some wild speculation of course regarding the PLA )

JRViejo · Apr 20, 2011

"It doesn't surprise me at all," said Anup Ghosh founder of security firm Invincea. "Almost every publicized and self-declared Advanced Persistent Threat (APT) attack this year has been through phishing emails."

Such emails, in fact, now appear to be the preferred method for illegally breaking into corporate networks, he said.

"All you need to do is to get an email to a target. You only need a very low click through rate to establish several points of presence inside an organization," Ghosh said. "If you have 1,000 employees in your organization and you train them all on not opening untrusted attachments, you'll still have someone doing it. This is not a problem you can train yourself out of."
Click to expand...

Phishing emerges as major corporate security threat by Jaikumar Vijayan.

Log in or Sign up

Oak Ridge National Lab shuts down Internet, email after cyberattack

JRViejo Super Moderator

ronjor Global Moderator

Baserk Registered Member

JRViejo Super Moderator

Log in or Sign up

Oak Ridge National Lab shuts down Internet, email after cyberattack

JRViejo Super Moderator

ronjor Global Moderator

Baserk Registered Member

JRViejo Super Moderator

Useful Searches