GasBuddy Blog

GasBuddy News Article

votes

Malicious virus shuttered power plant: DHS

Yahoo / Reuters -- A computer virus attacked a turbine control system at a U.S. power company last fall when a technician unknowingly inserted an infected USB computer drive into the network, keeping a plant off line for three weeks, according to a report posted on a U.S. government website.

The DHS report did not identify the plant but said criminal software, which is used to conduct financial crimes such as identity theft, was behind the incident.

It was introduced by an employee of a 3rd-party contractor that does business with the utility, according to the agency.

Many critical infrastructure control systems run on Windows XP and Windows 2000..They have "auto run" features enabled by default, which makes them an easy target for infection because malicious software loads as soon as a USB is plugged int

Read the Full Article

Submitted Jan 17, 2013 By: DellDude2

Back To News

Category: Daily News Article Discussions > Topics	Add to favorite topics

Author	Topic: Malicious virus shuttered power plant: DHS	Post a Reply Back to Topics

REPLIES (newest first)Ignore Short Messages

First

Next Last

honda0105 Champion Author Tallahassee Posts:18,580 Points:1,605,520 Joined:Nov 2008	Message Posted: Jan 21, 2013 8:01:25 AM Ignore honda0105 Report Abuse now that we know, how about going about fixing the vulnerabilities?
honda0105 Champion Author Tallahassee Posts:18,580 Points:1,605,520 Joined:Nov 2008	Message Posted: Jan 20, 2013 12:47:28 AM Ignore honda0105 Report Abuse shows how truly vulnerable the grid really is.
Rhino8of8 Champion Author Wisconsin Posts:1,235 Points:370,940 Joined:Jan 2012	Message Posted: Jan 18, 2013 8:47:17 AM Ignore Rhino8of8 Report Abuse So, did they disable the auto-run?
SkooterG Champion Author Phoenix Posts:1,359 Points:326,335 Joined:May 2012	Message Posted: Jan 18, 2013 4:04:25 AM Ignore SkooterG Report Abuse What the heck? Don't power plants have some kind of cyber security or protocol? How the heck was a third party contractor allowed to plug a personal drive into the main system? Just plain ol DUMB!
tomok Champion Author Portland Posts:32,911 Points:2,341,510 Joined:Aug 2006	Message Posted: Jan 18, 2013 3:09:30 AM Ignore tomok Report Abuse Malicious virus shuttered power plant? Do Not use outside computer programs or devices on the power plant computer system! If all else fails, install one of those free antivirus software programs that can control items like that. Where was the computer department or the internet technicians when this happened, out to lunch? The US and Israel did the same thing to Iran nuclear processing equipment, over sped the centrifuge and destroyed the equipment via the internet. Whatever the size or shape of the vehicle, vehicle manufactures Produce and the population ‘Drives’ vehicles with high MPG, are very safe, reliable, have a ‘reasonable’ cost and a good ‘value’ for the money. The price of fuel at the pump is too high! XII/XXII/MMXII! - The Day After......
rahcat Champion Author Grand Rapids Posts:2,448 Points:658,200 Joined:Jan 2010	Message Posted: Jan 18, 2013 12:23:08 AM Ignore rahcat Report Abuse Bugs are bad.
goldrose1 Champion Author Cleveland Posts:10,925 Points:1,920,910 Joined:Feb 2005	Message Posted: Jan 18, 2013 12:22:15 AM Ignore goldrose1 Report Abuse Can you say oops?!
jimmy544 Champion Author Boston Posts:4,074 Points:649,855 Joined:Feb 2011	Message Posted: Jan 18, 2013 12:21:16 AM Ignore jimmy544 Report Abuse Windoz strikes again!
unicornpmb Champion Author Buffalo Posts:8,471 Points:1,625,515 Joined:Sep 2005	Message Posted: Jan 18, 2013 12:21:09 AM Ignore unicornpmb Report Abuse They need better control and smarter people.
crreed1 Champion Author West Virginia Posts:1,965 Points:2,522,335 Joined:May 2005	Message Posted: Jan 18, 2013 12:19:09 AM Ignore crreed1 Report Abuse fix it
jrsva Champion Author Virginia Posts:9,830 Points:1,608,250 Joined:Jan 2006	Message Posted: Jan 18, 2013 12:18:19 AM Ignore jrsva Report Abuse “Needs McAfee Security Center.” That won’t do it if you have auto-run enabled and then plug in a infected drive.
tedjm1 Champion Author New York Posts:5,609 Points:800,300 Joined:Dec 2006	Message Posted: Jan 18, 2013 12:17:58 AM Ignore tedjm1 Report Abuse Bad security.
ican2step Champion Author Pittsburgh Posts:1,666 Points:423,625 Joined:Feb 2012	Message Posted: Jan 18, 2013 12:17:46 AM Ignore ican2step Report Abuse Good idea jrsva
jrsva Champion Author Virginia Posts:9,830 Points:1,608,250 Joined:Jan 2006	Message Posted: Jan 18, 2013 12:15:57 AM Ignore jrsva Report Abuse So disable the auto-run feature. It has been done on all computers under my control. The problem is that it requires editing the registry and most folks do not know how to do that. Also, most folks will not know how to get their software to start without auto-run. It is easy but most folks are clueless and, therefore, subject to virus invasions.
Quick68 Champion Author Columbus Posts:8,178 Points:1,221,800 Joined:Dec 2009	Message Posted: Jan 18, 2013 12:13:40 AM Ignore Quick68 Report Abuse Sounds like they put in a very cheap computer system.
HEBster Champion Author Kentucky Posts:8,768 Points:2,369,425 Joined:May 2006	Message Posted: Jan 18, 2013 12:13:25 AM Ignore HEBster Report Abuse Pretty scarey...
southtown43701 Champion Author Ohio Posts:11,347 Points:2,412,930 Joined:Jul 2005	Message Posted: Jan 18, 2013 12:11:37 AM Ignore southtown43701 Report Abuse all they have to do is drop a drive in the parking lot. Some idiot will plug it in.
jrschl Champion Author Louisville Posts:2,947 Points:677,065 Joined:Jun 2011	Message Posted: Jan 18, 2013 12:10:31 AM Ignore jrschl Report Abuse That's a bummer.
Toppers Champion Author Atlanta Posts:8,992 Points:2,465,945 Joined:Mar 2005	Message Posted: Jan 18, 2013 12:10:29 AM Ignore Toppers Report Abuse Surprised it took this long...
Cableman66 Champion Author North Carolina Posts:2,095 Points:486,920 Joined:May 2011	Message Posted: Jan 18, 2013 12:10:06 AM Ignore Cableman66 Report Abuse Old news.
boatfloyd Champion Author Jacksonville Posts:1,698 Points:383,975 Joined:Mar 2012	Message Posted: Jan 18, 2013 12:09:37 AM Ignore boatfloyd Report Abuse Needs McAfee Security Center.
dudleydolittle Champion Author Cleveland Posts:4,410 Points:587,295 Joined:Sep 2011	Message Posted: Jan 18, 2013 12:09:32 AM Ignore dudleydolittle Report Abuse old
ManOfLeisureII Champion Author Philadelphia Posts:1,854 Points:450,900 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:09:13 AM Ignore ManOfLeisureII Report Abuse Not much you can do about it
JagXKR Champion Author British Columbia Posts:3,134 Points:1,086,855 Joined:Dec 2009	Message Posted: Jan 18, 2013 12:08:35 AM Ignore JagXKR Report Abuse There needs to be greater urgency to protect power plants. If the eco terrorist president would spend more time on that than throwing away $Billions on his eco terrorist agenda the US would be a better place.
majjad Champion Author Dallas Posts:6,448 Points:1,428,650 Joined:Mar 2005	Message Posted: Jan 18, 2013 12:08:27 AM Ignore majjad Report Abuse The COO and/or VP of IT and all IT staff connect with that system should be fired. There's NO excuse for that type of sloppy security procedures.
tutaw Champion Author Kentucky Posts:3,575 Points:838,745 Joined:Sep 2008	Message Posted: Jan 18, 2013 12:08:23 AM Ignore tutaw Report Abuse this is not good
carinthuist Champion Author San Francisco Posts:2,221 Points:326,010 Joined:Mar 2012	Message Posted: Jan 18, 2013 12:08:10 AM Ignore carinthuist Report Abuse don't use usb
naspa Champion Author Cleveland Posts:1,250 Points:347,400 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:08:04 AM Ignore naspa Report Abuse Always award services and contracts to the lowest bid. Don't worry, what's the worst that can happen? Three weeks is not such a bad downtime at $1 mil every 30 seconds, is it?
SavALot Champion Author Virginia Beach Posts:8,449 Points:1,707,460 Joined:Apr 2005	Message Posted: Jan 18, 2013 12:07:26 AM Ignore SavALot Report Abuse So easy for these to be spread by people not paying attention
mamabeck Champion Author Florida Posts:1,628 Points:358,935 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:05:19 AM Ignore mamabeck Report Abuse Just shows how easily that entire operations and corporations can be subjected to major issues accidentally or purposely.
SpankyMI Champion Author Kalamazoo Posts:2,688 Points:755,280 Joined:Jan 2011	Message Posted: Jan 18, 2013 12:04:57 AM Ignore SpankyMI Report Abuse Leave your USB drives at home!
PrinceLH Champion Author Ontario Posts:2,672 Points:534,045 Joined:Jun 2011	Message Posted: Jan 18, 2013 12:04:20 AM Ignore PrinceLH Report Abuse More socialist bullshit!
cheaper0ON All-Star Author Ontario Posts:963 Points:394,055 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:04:18 AM Ignore cheaper0ON Report Abuse WoW!!!
Z51Corvette Champion Author Austin Posts:8,469 Points:1,667,400 Joined:Jan 2008	Message Posted: Jan 17, 2013 11:59:14 PM Ignore Z51Corvette Report Abuse bonzoo... go file for the job, lol! What a buffoon! Aren't the protocols to prevent something like this...
bonzoonfmb Champion Author Florida Posts:1,757 Points:640,400 Joined:Feb 2010	Message Posted: Jan 17, 2013 11:56:06 PM Ignore bonzoonfmb Report Abuse Poor IT management.
agent0077 All-Star Author Colorado Posts:669 Points:475,445 Joined:Jul 2011	Message Posted: Jan 17, 2013 11:54:34 PM Ignore agent0077 Report Abuse It's hard to believe what can happen
jackster111 Champion Author North Carolina Posts:3,287 Points:420,585 Joined:Feb 2012	Message Posted: Jan 17, 2013 11:53:11 PM Ignore jackster111 Report Abuse oh dear
mcmonsta Champion Author Honolulu Posts:3,207 Points:813,795 Joined:Sep 2009	Message Posted: Jan 17, 2013 11:52:21 PM Ignore mcmonsta Report Abuse don't more business realize whats possible nowadays or are they jut to keep head stuck in a hole
Aviator_Rob Champion Author New York Posts:3,776 Points:409,865 Joined:Mar 2012	Message Posted: Jan 17, 2013 11:51:50 PM Ignore Aviator_Rob Report Abuse This is what happens when people search for porn on the Internet from work.
tco9436 Champion Author Connecticut Posts:1,767 Points:718,950 Joined:Mar 2010	Message Posted: Jan 17, 2013 11:49:39 PM Ignore tco9436 Report Abuse Oh no
sent4456 Champion Author Toronto Posts:1,313 Points:2,121,945 Joined:Mar 2006	Message Posted: Jan 17, 2013 11:49:09 PM Ignore sent4456 Report Abuse Old news.
southrob Champion Author Tucson Posts:3,585 Points:685,150 Joined:Mar 2011	Message Posted: Jan 17, 2013 11:48:39 PM Ignore southrob Report Abuse dhan to help economy
Jmac2008 Champion Author Missouri Posts:2,254 Points:877,140 Joined:Dec 2008	Message Posted: Jan 17, 2013 11:46:14 PM Ignore Jmac2008 Report Abuse and why did he have access to the computer
mstearno Champion Author Dayton Posts:8,043 Points:1,727,235 Joined:Jan 2008	Message Posted: Jan 17, 2013 11:45:15 PM Ignore mstearno Report Abuse this is scary
letmathe Champion Author Chicago Posts:14,301 Points:3,129,770 Joined:May 2001	Message Posted: Jan 17, 2013 11:44:12 PM Ignore letmathe Report Abuse Yipes!
GigHarborHound Champion Author Tacoma Posts:2,512 Points:483,515 Joined:Sep 2011	Message Posted: Jan 17, 2013 11:42:58 PM Ignore GigHarborHound Report Abuse WOW!!!
bginsj Champion Author San Jose Posts:1,848 Points:1,230,635 Joined:May 2009	Message Posted: Jan 17, 2013 11:42:20 PM Ignore bginsj Report Abuse scary
DustyHorse Champion Author Virginia Posts:6,067 Points:1,387,845 Joined:Oct 2008	Message Posted: Jan 17, 2013 11:39:12 PM Ignore DustyHorse Report Abuse Wow that is scary. They need to improve security at power plants.
boatmen Champion Author New York Posts:3,060 Points:619,330 Joined:Jan 2011	Message Posted: Jan 17, 2013 11:37:54 PM Ignore boatmen Report Abuse going to happen more and more as we become reliant on machines and do away with humans
BREW9 All-Star Author Tampa Posts:861 Points:2,907,980 Joined:Jun 2004	Message Posted: Jan 17, 2013 11:33:43 PM Ignore BREW9 Report Abuse ok