GasBuddy Blog

GasBuddy News Article

votes

Malicious virus shuttered power plant: DHS

Yahoo / Reuters -- A computer virus attacked a turbine control system at a U.S. power company last fall when a technician unknowingly inserted an infected USB computer drive into the network, keeping a plant off line for three weeks, according to a report posted on a U.S. government website.

The DHS report did not identify the plant but said criminal software, which is used to conduct financial crimes such as identity theft, was behind the incident.

It was introduced by an employee of a 3rd-party contractor that does business with the utility, according to the agency.

Many critical infrastructure control systems run on Windows XP and Windows 2000..They have "auto run" features enabled by default, which makes them an easy target for infection because malicious software loads as soon as a USB is plugged int

Read the Full Article

Submitted Jan 17, 2013 By: DellDude2

Back To News

Category: Daily News Article Discussions > Topics	Add to favorite topics

Author	Topic: Malicious virus shuttered power plant: DHS	Post a Reply Back to Topics

REPLIES (newest first)Ignore Short Messages

First

Next Last

honda0105 Champion Author Tallahassee Posts:18,609 Points:1,608,545 Joined:Nov 2008	Message Posted: Jan 21, 2013 8:01:25 AM Ignore honda0105 Report Abuse now that we know, how about going about fixing the vulnerabilities?
honda0105 Champion Author Tallahassee Posts:18,609 Points:1,608,545 Joined:Nov 2008	Message Posted: Jan 20, 2013 12:47:28 AM Ignore honda0105 Report Abuse shows how truly vulnerable the grid really is.
Rhino8of8 Champion Author Wisconsin Posts:1,245 Points:373,640 Joined:Jan 2012	Message Posted: Jan 18, 2013 8:47:17 AM Ignore Rhino8of8 Report Abuse So, did they disable the auto-run?
SkooterG Champion Author Phoenix Posts:1,359 Points:328,585 Joined:May 2012	Message Posted: Jan 18, 2013 4:04:25 AM Ignore SkooterG Report Abuse What the heck? Don't power plants have some kind of cyber security or protocol? How the heck was a third party contractor allowed to plug a personal drive into the main system? Just plain ol DUMB!
tomok Champion Author Portland Posts:32,987 Points:2,344,535 Joined:Aug 2006	Message Posted: Jan 18, 2013 3:09:30 AM Ignore tomok Report Abuse Malicious virus shuttered power plant? Do Not use outside computer programs or devices on the power plant computer system! If all else fails, install one of those free antivirus software programs that can control items like that. Where was the computer department or the internet technicians when this happened, out to lunch? The US and Israel did the same thing to Iran nuclear processing equipment, over sped the centrifuge and destroyed the equipment via the internet. Whatever the size or shape of the vehicle, vehicle manufactures Produce and the population ‘Drives’ vehicles with high MPG, are very safe, reliable, have a ‘reasonable’ cost and a good ‘value’ for the money. The price of fuel at the pump is too high! XII/XXII/MMXII! - The Day After......
rahcat Champion Author Grand Rapids Posts:2,463 Points:661,975 Joined:Jan 2010	Message Posted: Jan 18, 2013 12:23:08 AM Ignore rahcat Report Abuse Bugs are bad.
goldrose1 Champion Author Cleveland Posts:10,931 Points:1,924,280 Joined:Feb 2005	Message Posted: Jan 18, 2013 12:22:15 AM Ignore goldrose1 Report Abuse Can you say oops?!
jimmy544 Champion Author Boston Posts:4,104 Points:652,880 Joined:Feb 2011	Message Posted: Jan 18, 2013 12:21:16 AM Ignore jimmy544 Report Abuse Windoz strikes again!
unicornpmb Champion Author Buffalo Posts:8,486 Points:1,628,540 Joined:Sep 2005	Message Posted: Jan 18, 2013 12:21:09 AM Ignore unicornpmb Report Abuse They need better control and smarter people.
crreed1 Champion Author West Virginia Posts:1,980 Points:2,525,360 Joined:May 2005	Message Posted: Jan 18, 2013 12:19:09 AM Ignore crreed1 Report Abuse fix it
jrsva Champion Author Virginia Posts:9,847 Points:1,612,025 Joined:Jan 2006	Message Posted: Jan 18, 2013 12:18:19 AM Ignore jrsva Report Abuse “Needs McAfee Security Center.” That won’t do it if you have auto-run enabled and then plug in a infected drive.
tedjm1 Champion Author New York Posts:5,609 Points:800,300 Joined:Dec 2006	Message Posted: Jan 18, 2013 12:17:58 AM Ignore tedjm1 Report Abuse Bad security.
ican2step Champion Author Pittsburgh Posts:1,676 Points:426,425 Joined:Feb 2012	Message Posted: Jan 18, 2013 12:17:46 AM Ignore ican2step Report Abuse Good idea jrsva
jrsva Champion Author Virginia Posts:9,847 Points:1,612,025 Joined:Jan 2006	Message Posted: Jan 18, 2013 12:15:57 AM Ignore jrsva Report Abuse So disable the auto-run feature. It has been done on all computers under my control. The problem is that it requires editing the registry and most folks do not know how to do that. Also, most folks will not know how to get their software to start without auto-run. It is easy but most folks are clueless and, therefore, subject to virus invasions.
Quick68 Champion Author Columbus Posts:8,218 Points:1,224,825 Joined:Dec 2009	Message Posted: Jan 18, 2013 12:13:40 AM Ignore Quick68 Report Abuse Sounds like they put in a very cheap computer system.
HEBster Champion Author Kentucky Posts:8,783 Points:2,373,050 Joined:May 2006	Message Posted: Jan 18, 2013 12:13:25 AM Ignore HEBster Report Abuse Pretty scarey...
southtown43701 Champion Author Ohio Posts:11,364 Points:2,415,955 Joined:Jul 2005	Message Posted: Jan 18, 2013 12:11:37 AM Ignore southtown43701 Report Abuse all they have to do is drop a drive in the parking lot. Some idiot will plug it in.
jrschl Champion Author Louisville Posts:2,962 Points:680,090 Joined:Jun 2011	Message Posted: Jan 18, 2013 12:10:31 AM Ignore jrschl Report Abuse That's a bummer.
Toppers Champion Author Atlanta Posts:9,007 Points:2,469,720 Joined:Mar 2005	Message Posted: Jan 18, 2013 12:10:29 AM Ignore Toppers Report Abuse Surprised it took this long...
Cableman66 Champion Author North Carolina Posts:2,110 Points:489,945 Joined:May 2011	Message Posted: Jan 18, 2013 12:10:06 AM Ignore Cableman66 Report Abuse Old news.
boatfloyd Champion Author Jacksonville Posts:1,713 Points:387,000 Joined:Mar 2012	Message Posted: Jan 18, 2013 12:09:37 AM Ignore boatfloyd Report Abuse Needs McAfee Security Center.
dudleydolittle Champion Author Cleveland Posts:4,425 Points:591,070 Joined:Sep 2011	Message Posted: Jan 18, 2013 12:09:32 AM Ignore dudleydolittle Report Abuse old
ManOfLeisureII Champion Author Philadelphia Posts:1,869 Points:453,925 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:09:13 AM Ignore ManOfLeisureII Report Abuse Not much you can do about it
JagXKR Champion Author British Columbia Posts:3,154 Points:1,090,405 Joined:Dec 2009	Message Posted: Jan 18, 2013 12:08:35 AM Ignore JagXKR Report Abuse There needs to be greater urgency to protect power plants. If the eco terrorist president would spend more time on that than throwing away $Billions on his eco terrorist agenda the US would be a better place.
majjad Champion Author Dallas Posts:6,448 Points:1,428,650 Joined:Mar 2005	Message Posted: Jan 18, 2013 12:08:27 AM Ignore majjad Report Abuse The COO and/or VP of IT and all IT staff connect with that system should be fired. There's NO excuse for that type of sloppy security procedures.
tutaw Champion Author Kentucky Posts:3,590 Points:841,545 Joined:Sep 2008	Message Posted: Jan 18, 2013 12:08:23 AM Ignore tutaw Report Abuse this is not good
carinthuist Champion Author San Francisco Posts:2,238 Points:328,285 Joined:Mar 2012	Message Posted: Jan 18, 2013 12:08:10 AM Ignore carinthuist Report Abuse don't use usb
naspa Champion Author Cleveland Posts:1,266 Points:351,175 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:08:04 AM Ignore naspa Report Abuse Always award services and contracts to the lowest bid. Don't worry, what's the worst that can happen? Three weeks is not such a bad downtime at $1 mil every 30 seconds, is it?
SavALot Champion Author Virginia Beach Posts:8,469 Points:1,710,860 Joined:Apr 2005	Message Posted: Jan 18, 2013 12:07:26 AM Ignore SavALot Report Abuse So easy for these to be spread by people not paying attention
mamabeck Champion Author Florida Posts:1,646 Points:361,810 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:05:19 AM Ignore mamabeck Report Abuse Just shows how easily that entire operations and corporations can be subjected to major issues accidentally or purposely.
SpankyMI Champion Author Kalamazoo Posts:2,708 Points:759,280 Joined:Jan 2011	Message Posted: Jan 18, 2013 12:04:57 AM Ignore SpankyMI Report Abuse Leave your USB drives at home!
PrinceLH Champion Author Ontario Posts:2,687 Points:537,070 Joined:Jun 2011	Message Posted: Jan 18, 2013 12:04:20 AM Ignore PrinceLH Report Abuse More socialist bullshit!
cheaper0ON All-Star Author Ontario Posts:978 Points:397,080 Joined:Jan 2012	Message Posted: Jan 18, 2013 12:04:18 AM Ignore cheaper0ON Report Abuse WoW!!!
Z51Corvette Champion Author Austin Posts:8,480 Points:1,670,195 Joined:Jan 2008	Message Posted: Jan 17, 2013 11:59:14 PM Ignore Z51Corvette Report Abuse bonzoo... go file for the job, lol! What a buffoon! Aren't the protocols to prevent something like this...
bonzoonfmb Champion Author Florida Posts:1,777 Points:643,610 Joined:Feb 2010	Message Posted: Jan 17, 2013 11:56:06 PM Ignore bonzoonfmb Report Abuse Poor IT management.
agent0077 All-Star Author Colorado Posts:684 Points:478,470 Joined:Jul 2011	Message Posted: Jan 17, 2013 11:54:34 PM Ignore agent0077 Report Abuse It's hard to believe what can happen
jackster111 Champion Author North Carolina Posts:3,319 Points:424,585 Joined:Feb 2012	Message Posted: Jan 17, 2013 11:53:11 PM Ignore jackster111 Report Abuse oh dear
mcmonsta Champion Author Honolulu Posts:3,222 Points:817,570 Joined:Sep 2009	Message Posted: Jan 17, 2013 11:52:21 PM Ignore mcmonsta Report Abuse don't more business realize whats possible nowadays or are they jut to keep head stuck in a hole
Aviator_Rob Champion Author New York Posts:3,795 Points:412,565 Joined:Mar 2012	Message Posted: Jan 17, 2013 11:51:50 PM Ignore Aviator_Rob Report Abuse This is what happens when people search for porn on the Internet from work.
tco9436 Champion Author Connecticut Posts:1,772 Points:721,425 Joined:Mar 2010	Message Posted: Jan 17, 2013 11:49:39 PM Ignore tco9436 Report Abuse Oh no
sent4456 Champion Author Toronto Posts:1,330 Points:2,125,010 Joined:Mar 2006	Message Posted: Jan 17, 2013 11:49:09 PM Ignore sent4456 Report Abuse Old news.
southrob Champion Author Tucson Posts:3,590 Points:686,225 Joined:Mar 2011	Message Posted: Jan 17, 2013 11:48:39 PM Ignore southrob Report Abuse dhan to help economy
Jmac2008 Champion Author Missouri Posts:2,269 Points:880,165 Joined:Dec 2008	Message Posted: Jan 17, 2013 11:46:14 PM Ignore Jmac2008 Report Abuse and why did he have access to the computer
mstearno Champion Author Dayton Posts:8,061 Points:1,730,260 Joined:Jan 2008	Message Posted: Jan 17, 2013 11:45:15 PM Ignore mstearno Report Abuse this is scary
letmathe Champion Author Chicago Posts:14,316 Points:3,132,545 Joined:May 2001	Message Posted: Jan 17, 2013 11:44:12 PM Ignore letmathe Report Abuse Yipes!
GigHarborHound Champion Author Tacoma Posts:2,532 Points:487,515 Joined:Sep 2011	Message Posted: Jan 17, 2013 11:42:58 PM Ignore GigHarborHound Report Abuse WOW!!!
bginsj Champion Author San Jose Posts:1,868 Points:1,234,185 Joined:May 2009	Message Posted: Jan 17, 2013 11:42:20 PM Ignore bginsj Report Abuse scary
DustyHorse Champion Author Virginia Posts:6,079 Points:1,390,785 Joined:Oct 2008	Message Posted: Jan 17, 2013 11:39:12 PM Ignore DustyHorse Report Abuse Wow that is scary. They need to improve security at power plants.
boatmen Champion Author New York Posts:3,080 Points:622,580 Joined:Jan 2011	Message Posted: Jan 17, 2013 11:37:54 PM Ignore boatmen Report Abuse going to happen more and more as we become reliant on machines and do away with humans
BREW9 All-Star Author Tampa Posts:876 Points:2,911,855 Joined:Jun 2004	Message Posted: Jan 17, 2013 11:33:43 PM Ignore BREW9 Report Abuse ok