{"id":246002,"date":"2021-05-10T02:17:37","date_gmt":"2021-05-09T23:17:37","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/cyberattack-on-us-pipeline-is-linked-to-criminal-gang-2\/"},"modified":"2021-05-10T02:17:37","modified_gmt":"2021-05-09T23:17:37","slug":"cyberattack-on-us-pipeline-is-linked-to-criminal-gang-2","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/cyberattack-on-us-pipeline-is-linked-to-criminal-gang-2\/","title":{"rendered":"#Cyberattack on US pipeline is linked to criminal gang"},"content":{"rendered":"

“#Cyberattack on US pipeline is linked to criminal gang<\/strong>”<\/p>\n

\n

The cyberattack that shut down a major oil pipeline was carried out by a gang that is known to extort corporations and give a cut of the ransoms to charity, a new report said. <\/p>\n

The Colonial Pipeline, which carries more 100 million gallons of fuel from Texas to the Northeast each day, has been out of service since Friday. <\/p>\n

Two sources with knowledge of the federal investigation into the attack told The Associated Press<\/a> that the criminal enterprise known as DarkSide is behind it. <\/p>\n

DarkSide launched a ransomware attack against Colonial, which involves paralyzing company networks before demanding a large ransom to undo the damage. <\/p>\n

Colonial on Sunday said it\u2019s developing a \u201csystem restart\u201d plan for the pipeline, which delivers about 45 percent of the East Coast\u2019s fuel supply. <\/p>\n

\u201cWe are in the process of restoring service to other laterals and will bring our full system back online only when we believe it is safe to do so, and in full compliance with the app<\/a>roval of all federal regulations,\u201d the company said in a statement. <\/p>\n

Meanwhile, Commerce Secretary Gina Raimondo said Sunday an \u201call-hands-on-deck\u201d effort is underway to restore operations. <\/p>\n

\u201cWe are working closely with the company, state and local officials to make sure that they get back up to normal operations as quickly as possible and there aren\u2019t disruptions in supply,\u201d Raimondo said.<\/p>\n

\"Colonial
Colonial Pipeline\u2019s Charlotte Tank Farm in Charlotte, North Carolina.<\/figcaption>
Colonial Pipeline\/Handout via REUTERS<\/span><\/figcaption><\/figure>\n

DarkSide claims that it does not attack hospitals and nursing homes, educational or government targets and that it donates a portion of its take to charity. It has been active since August and, typical of the most potent ransomware gangs, is known to avoid targeting organizations in former Soviet bloc nations.<\/p>\n

Colonial did not say whether it has paid or was negotiating a ransom, and DarkSide neither announced the attack on its dark web site nor responded to an Associated Press reporter\u2019s queries. The lack of acknowledgment usually indicates a victim is either negotiating or has paid.<\/p>\n

The Department of Transportation said it would relax hours-of-service regulations for drivers carrying gasoline, diesel, jet fuel and other refined petroleum products, allowing them to work extra or more flexible hours to make up for any fuel shortage related to the pipeline outage. That applies to drivers carrying fuel to 17 states and the District of Columbia.<\/p>\n

One of the people close to the Colonial investigation said that the attackers also stole data from the company, presumably for extortion purposes. Sometimes stolen data is more valuable to ransomware criminals than the leverage they gain by crippling a network, because some victims are loath to see sensitive information of theirs dumped online.<\/p>\n

Security experts said the attack should be a warning for operators of critical infrastructure \u2014 including electrical and water utilities and energy and transportation companies \u2014 that not investing in updating their security puts them at risk of catastrophe.<\/p>\n

Ed Amoroso, CEO of TAG Cyber, said Colonial was lucky its attacker was at least ostensibly motivated only by profit, not geopolitics. State-backed hackers bent on more serious destruction use the same intrusion methods as ransomware gangs.<\/p>\n

\u201cFor companies vulnerable to ransomware, it\u2019s a bad sign because they are probably more vulnerable to more serious attacks,\u201d he said. Russian cyberwarriors, for example, crippled the electrical grid in Ukraine during the winters of 2015 and 2016.<\/p>\n

\"Fuel
Fuel tanks at a Colonial Pipeline station in Woodbine, Maryland. <\/figcaption>
EPA\/JIM LO SCALZO<\/span><\/figcaption><\/figure>\n

Cyberextortion attempts in the US\u00a0<\/a>have become a death-by-a-thousand-cuts phenomenon in the past year, with attacks forcing delays in cancer treatment\u00a0at hospitals,\u00a0<\/a>interrupting schooling and paralyzing police and city governments.<\/p>\n

Tulsa, Oklahoma, this week became the 32nd state or local government in the US to come under ransomware attack, said Brett Callow, a threat analyst with the cybersecurity firm Emsisoft.<\/p>\n

Average ransoms paid in the US jumped nearly threefold to more than $310,000 last year. The average downtime for victims of ransomware attacks is 21 days, according to the firm Coveware, which helps victims respond.<\/p>\n

David Kennedy, founder and senior principal security consultant at TrustedSec, said that once a ransomware attack is discovered, companies have little recourse but to completely rebuild their infrastructure, or pay the ransom.<\/p>\n

\u201cRansomware is absolutely out of control and one of the biggest threats we face as a nation,\u201d Kennedy said. \u201cThe problem we face is most companies are grossly underprepared to face these threats.\u201d<\/p>\n

Colonial transports gasoline, diesel, jet fuel and home heating oil from refineries on the Gulf Coast through pipelines running from Texas to New Jersey. Its pipeline system spans more than 5,500 miles (8,850 kilometers), transporting more than 100 million gallons (380 million liters) a day.<\/p>\n

Debnil Chowdhury at the research firm IHSMarkit said that if the outage stretches to one to three weeks, gas prices could begin to rise.<\/p>\n

\u201cI wouldn\u2019t be surprised, if this ends up being an outage of that magnitude, if we see 15- to 20-cent rise in gas prices over next week or two,\u201d he said.<\/p>\n

The Justice Department has a new\u00a0task force dedicated to countering ransomware attacks.<\/a><\/p>\n

While the US has not suffered any serious cyberattacks on its critical infrastructure, officials say Russian hackers in particular are known to have infiltrated some crucial sectors, positioning themselves to do damage if armed conflict were to break out. While there is no evidence\u00a0the Kremlin benefits financially from ransomware,<\/a>\u00a0US officials believe President Vladimir Putin savors the mayhem it wreaks in adversaries\u2019 economies.<\/p>\n

Iranian hackers have also been aggressive in trying to gain access to utilities, factories and oil and gas facilities. In one case in 2013, they\u00a0broke into the control system of a US dam.<\/a><\/p>\n

With Post Wires<\/em>\n <\/div>\n

If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n

\n

For forums sites go to Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n

\n

If you want to read more News<\/a> articles, you can visit our News category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n

Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

“#Cyberattack on US pipeline is linked to criminal gang” The cyberattack that shut down a major oil pipeline was carried out by a gang that is known to extort corporations and give a cut of the ransoms to charity, a new report said. The Colonial Pipeline, which carries more 100 million gallons of fuel from…<\/p>\n","protected":false},"author":1,"featured_media":246003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/nypost.com\/wp-content\/uploads\/sites\/2\/2021\/05\/colonial-pipeline.jpg?quality=90&strip=all&w=1200","fifu_image_alt":"","footnotes":""},"categories":[70897],"tags":[105141,70375,100568,70944,72970,105117],"class_list":["post-246002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-5-9-21","tag-cybersecurity","tag-gas-prices","tag-hackers","tag-oil","tag-pipeline"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/246002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=246002"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/246002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/246003"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=246002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=246002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=246002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}