Feeds

Viruses infect vital control systems at TWO US power stations

'Sophisticated' malware snuck in via USB drive

Next gen security for virtualised datacentres

Two US power stations were infected by malware in the last quarter of 2012, according to a report by the US Department of Homeland Security's Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).

USB flash drives packed with software nasties were blamed for a compromise of industrial control systems in both cases. Neither infected power plant was named.

The first case emerged after a maintenance engineer noticed the thumb drive he used to back up control system settings had become unreliable. The worker then referred the matter to the IT department, which found three infections on the gadget.

Investigators found sophisticated although unspecified malware on two engineering workstations associated with running critical applications. The subsequent cleanup operation was complicated by a lack of backups.

The second infection was blamed on a third-party contractor who unwittingly poisoned systems at a power generation utility after plugging in an infected USB drive at work. A "crimeware" virus got into a turbine control system and hit approximately 10 computers on its network. The subsequent cleanup delayed a plant restart operation by about three weeks, the report said.

ICS-CERT highlights cases as a means to educate other power station operators about the risk of malware in industrial control system environments. More details on both cases, along with information about proactive research by ICS-CERT into SCADA security, can be found in a quarterly report here (PDF). ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
KER-CHING! CryptoWall ransomware scam rakes in $1 MEEELLION
Anatomy of the net's most destructive ransomware threat
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
Researchers camouflage haxxor traps with fake application traffic
Honeypots sweetened to resemble actual workloads, complete with 'secure' logins
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.