GasBuddy Blog

GasBuddy News Article

votes

Malicious virus shuttered power plant: DHS

Yahoo / Reuters -- A computer virus attacked a turbine control system at a U.S. power company last fall when a technician unknowingly inserted an infected USB computer drive into the network, keeping a plant off line for three weeks, according to a report posted on a U.S. government website.

The DHS report did not identify the plant but said criminal software, which is used to conduct financial crimes such as identity theft, was behind the incident.

It was introduced by an employee of a 3rd-party contractor that does business with the utility, according to the agency.

Many critical infrastructure control systems run on Windows XP and Windows 2000..They have "auto run" features enabled by default, which makes them an easy target for infection because malicious software loads as soon as a USB is plugged int

Read the Full Article

Submitted Jan 17, 2013 By: DellDude2

Back To News

Category: Daily News Article Discussions > Topics	Add to favorite topics

Author	Topic: Malicious virus shuttered power plant: DHS	Post a Reply Back to Topics

REPLIES (newest first)Ignore Short Messages

First

Next Last

honda0105 Champion Author Tallahassee Posts:18,828 Points:1,637,220 Joined:Nov 2008	Message Posted: Jan 21, 2013 6:01:25 AM Ignore honda0105 Report Abuse now that we know, how about going about fixing the vulnerabilities?
honda0105 Champion Author Tallahassee Posts:18,828 Points:1,637,220 Joined:Nov 2008	Message Posted: Jan 19, 2013 10:47:28 PM Ignore honda0105 Report Abuse shows how truly vulnerable the grid really is.
Rhino8of8 Champion Author Wisconsin Posts:1,341 Points:400,290 Joined:Jan 2012	Message Posted: Jan 18, 2013 6:47:17 AM Ignore Rhino8of8 Report Abuse So, did they disable the auto-run?
SkooterG Champion Author Phoenix Posts:1,369 Points:344,185 Joined:May 2012	Message Posted: Jan 18, 2013 2:04:25 AM Ignore SkooterG Report Abuse What the heck? Don't power plants have some kind of cyber security or protocol? How the heck was a third party contractor allowed to plug a personal drive into the main system? Just plain ol DUMB!
tomok Champion Author Portland Posts:33,594 Points:2,373,210 Joined:Aug 2006	Message Posted: Jan 18, 2013 1:09:30 AM Ignore tomok Report Abuse Malicious virus shuttered power plant? Do Not use outside computer programs or devices on the power plant computer system! If all else fails, install one of those free antivirus software programs that can control items like that. Where was the computer department or the internet technicians when this happened, out to lunch? The US and Israel did the same thing to Iran nuclear processing equipment, over sped the centrifuge and destroyed the equipment via the internet. Whatever the size or shape of the vehicle, vehicle manufactures Produce and the population ‘Drives’ vehicles with high MPG, are very safe, reliable, have a ‘reasonable’ cost and a good ‘value’ for the money. The price of fuel at the pump is too high! XII/XXII/MMXII! - The Day After......
rahcat Champion Author Grand Rapids Posts:2,681 Points:689,900 Joined:Jan 2010	Message Posted: Jan 17, 2013 10:23:08 PM Ignore rahcat Report Abuse Bugs are bad.
goldrose1 Champion Author Cleveland Posts:11,071 Points:1,949,605 Joined:Feb 2005	Message Posted: Jan 17, 2013 10:22:15 PM Ignore goldrose1 Report Abuse Can you say oops?!
jimmy544 Champion Author Boston Posts:4,384 Points:681,555 Joined:Feb 2011	Message Posted: Jan 17, 2013 10:21:16 PM Ignore jimmy544 Report Abuse Windoz strikes again!
unicornpmb Champion Author Buffalo Posts:8,631 Points:1,657,215 Joined:Sep 2005	Message Posted: Jan 17, 2013 10:21:09 PM Ignore unicornpmb Report Abuse They need better control and smarter people.
crreed1 Champion Author West Virginia Posts:2,100 Points:2,550,715 Joined:May 2005	Message Posted: Jan 17, 2013 10:19:09 PM Ignore crreed1 Report Abuse fix it
jrsva Champion Author Virginia Posts:9,999 Points:1,639,950 Joined:Jan 2006	Message Posted: Jan 17, 2013 10:18:19 PM Ignore jrsva Report Abuse “Needs McAfee Security Center.” That won’t do it if you have auto-run enabled and then plug in a infected drive.
tedjm1 Champion Author New York Posts:5,609 Points:800,300 Joined:Dec 2006	Message Posted: Jan 17, 2013 10:17:58 PM Ignore tedjm1 Report Abuse Bad security.
ican2step Champion Author Pittsburgh Posts:1,811 Points:452,400 Joined:Feb 2012	Message Posted: Jan 17, 2013 10:17:46 PM Ignore ican2step Report Abuse Good idea jrsva
jrsva Champion Author Virginia Posts:9,999 Points:1,639,950 Joined:Jan 2006	Message Posted: Jan 17, 2013 10:15:57 PM Ignore jrsva Report Abuse So disable the auto-run feature. It has been done on all computers under my control. The problem is that it requires editing the registry and most folks do not know how to do that. Also, most folks will not know how to get their software to start without auto-run. It is easy but most folks are clueless and, therefore, subject to virus invasions.
Quick68 Champion Author Columbus Posts:8,448 Points:1,253,500 Joined:Dec 2009	Message Posted: Jan 17, 2013 10:13:40 PM Ignore Quick68 Report Abuse Sounds like they put in a very cheap computer system.
HEBster Champion Author Kentucky Posts:8,927 Points:2,400,855 Joined:May 2006	Message Posted: Jan 17, 2013 10:13:25 PM Ignore HEBster Report Abuse Pretty scarey...
southtown43701 Champion Author Ohio Posts:11,561 Points:2,444,630 Joined:Jul 2005	Message Posted: Jan 17, 2013 10:11:37 PM Ignore southtown43701 Report Abuse all they have to do is drop a drive in the parking lot. Some idiot will plug it in.
jrschl Champion Author Louisville Posts:3,107 Points:708,465 Joined:Jun 2011	Message Posted: Jan 17, 2013 10:10:31 PM Ignore jrschl Report Abuse That's a bummer.
Toppers Champion Author Atlanta Posts:9,152 Points:2,498,395 Joined:Mar 2005	Message Posted: Jan 17, 2013 10:10:29 PM Ignore Toppers Report Abuse Surprised it took this long...
Cableman66 Champion Author North Carolina Posts:2,247 Points:517,585 Joined:May 2011	Message Posted: Jan 17, 2013 10:10:06 PM Ignore Cableman66 Report Abuse Old news.
boatfloyd Champion Author Jacksonville Posts:1,858 Points:415,675 Joined:Mar 2012	Message Posted: Jan 17, 2013 10:09:37 PM Ignore boatfloyd Report Abuse Needs McAfee Security Center.
dudleydolittle Champion Author Cleveland Posts:4,573 Points:618,145 Joined:Sep 2011	Message Posted: Jan 17, 2013 10:09:32 PM Ignore dudleydolittle Report Abuse old
ManOfLeisureII Champion Author Philadelphia Posts:2,015 Points:481,100 Joined:Jan 2012	Message Posted: Jan 17, 2013 10:09:13 PM Ignore ManOfLeisureII Report Abuse Not much you can do about it
JagXKR Champion Author British Columbia Posts:3,293 Points:1,118,515 Joined:Dec 2009	Message Posted: Jan 17, 2013 10:08:35 PM Ignore JagXKR Report Abuse There needs to be greater urgency to protect power plants. If the eco terrorist president would spend more time on that than throwing away $Billions on his eco terrorist agenda the US would be a better place.
majjad Champion Author Dallas Posts:6,465 Points:1,440,690 Joined:Mar 2005	Message Posted: Jan 17, 2013 10:08:27 PM Ignore majjad Report Abuse The COO and/or VP of IT and all IT staff connect with that system should be fired. There's NO excuse for that type of sloppy security procedures.
tutaw Champion Author Kentucky Posts:3,759 Points:870,220 Joined:Sep 2008	Message Posted: Jan 17, 2013 10:08:23 PM Ignore tutaw Report Abuse this is not good
carinthuist Champion Author San Francisco Posts:2,373 Points:355,165 Joined:Mar 2012	Message Posted: Jan 17, 2013 10:08:10 PM Ignore carinthuist Report Abuse don't use usb
naspa Champion Author Cleveland Posts:1,412 Points:379,625 Joined:Jan 2012	Message Posted: Jan 17, 2013 10:08:04 PM Ignore naspa Report Abuse Always award services and contracts to the lowest bid. Don't worry, what's the worst that can happen? Three weeks is not such a bad downtime at $1 mil every 30 seconds, is it?
SavALot Champion Author Virginia Beach Posts:8,618 Points:1,738,435 Joined:Apr 2005	Message Posted: Jan 17, 2013 10:07:26 PM Ignore SavALot Report Abuse So easy for these to be spread by people not paying attention
mamabeck Champion Author Florida Posts:1,724 Points:385,385 Joined:Jan 2012	Message Posted: Jan 17, 2013 10:05:19 PM Ignore mamabeck Report Abuse Just shows how easily that entire operations and corporations can be subjected to major issues accidentally or purposely.
SpankyMI Champion Author Kalamazoo Posts:2,831 Points:784,615 Joined:Jan 2011	Message Posted: Jan 17, 2013 10:04:57 PM Ignore SpankyMI Report Abuse Leave your USB drives at home!
PrinceLH Champion Author Ontario Posts:2,832 Points:565,745 Joined:Jun 2011	Message Posted: Jan 17, 2013 10:04:20 PM Ignore PrinceLH Report Abuse More socialist bullshit!
cheaper0ON Champion Author Ontario Posts:1,123 Points:425,755 Joined:Jan 2012	Message Posted: Jan 17, 2013 10:04:18 PM Ignore cheaper0ON Report Abuse WoW!!!
Z51Corvette Champion Author Austin Posts:8,608 Points:1,697,410 Joined:Jan 2008	Message Posted: Jan 17, 2013 9:59:14 PM Ignore Z51Corvette Report Abuse bonzoo... go file for the job, lol! What a buffoon! Aren't the protocols to prevent something like this...
bonzoonfmb Champion Author Florida Posts:1,817 Points:664,910 Joined:Feb 2010	Message Posted: Jan 17, 2013 9:56:06 PM Ignore bonzoonfmb Report Abuse Poor IT management.
agent0077 All-Star Author Colorado Posts:828 Points:508,245 Joined:Jul 2011	Message Posted: Jan 17, 2013 9:54:34 PM Ignore agent0077 Report Abuse It's hard to believe what can happen
jackster111 Champion Author North Carolina Posts:3,537 Points:453,035 Joined:Feb 2012	Message Posted: Jan 17, 2013 9:53:11 PM Ignore jackster111 Report Abuse oh dear
mcmonsta Champion Author Honolulu Posts:3,347 Points:845,320 Joined:Sep 2009	Message Posted: Jan 17, 2013 9:52:21 PM Ignore mcmonsta Report Abuse don't more business realize whats possible nowadays or are they jut to keep head stuck in a hole
Aviator_Rob Champion Author New York Posts:3,985 Points:440,590 Joined:Mar 2012	Message Posted: Jan 17, 2013 9:51:50 PM Ignore Aviator_Rob Report Abuse This is what happens when people search for porn on the Internet from work.
tco9436 Champion Author Connecticut Posts:1,807 Points:743,650 Joined:Mar 2010	Message Posted: Jan 17, 2013 9:49:39 PM Ignore tco9436 Report Abuse Oh no
sent4456 Champion Author Toronto Posts:1,434 Points:2,152,115 Joined:Mar 2006	Message Posted: Jan 17, 2013 9:49:09 PM Ignore sent4456 Report Abuse Old news.
southrob Champion Author Tucson Posts:3,736 Points:714,900 Joined:Mar 2011	Message Posted: Jan 17, 2013 9:48:39 PM Ignore southrob Report Abuse dhan to help economy
Jmac2008 Champion Author Missouri Posts:2,411 Points:907,865 Joined:Dec 2008	Message Posted: Jan 17, 2013 9:46:14 PM Ignore Jmac2008 Report Abuse and why did he have access to the computer
mstearno Champion Author Dayton Posts:8,174 Points:1,755,920 Joined:Jan 2008	Message Posted: Jan 17, 2013 9:45:15 PM Ignore mstearno Report Abuse this is scary
letmathe Champion Author Chicago Posts:14,443 Points:3,158,595 Joined:May 2001	Message Posted: Jan 17, 2013 9:44:12 PM Ignore letmathe Report Abuse Yipes!
GigHarborHound Champion Author Tacoma Posts:2,669 Points:514,240 Joined:Sep 2011	Message Posted: Jan 17, 2013 9:42:58 PM Ignore GigHarborHound Report Abuse WOW!!!
bginsj Champion Author San Jose Posts:1,958 Points:1,260,085 Joined:May 2009	Message Posted: Jan 17, 2013 9:42:20 PM Ignore bginsj Report Abuse scary
DustyHorse Champion Author Virginia Posts:6,222 Points:1,417,740 Joined:Oct 2008	Message Posted: Jan 17, 2013 9:39:12 PM Ignore DustyHorse Report Abuse Wow that is scary. They need to improve security at power plants.
boatmen Champion Author New York Posts:3,201 Points:648,630 Joined:Jan 2011	Message Posted: Jan 17, 2013 9:37:54 PM Ignore boatmen Report Abuse going to happen more and more as we become reliant on machines and do away with humans
BREW9 Champion Author Tampa Posts:1,020 Points:2,939,660 Joined:Jun 2004	Message Posted: Jan 17, 2013 9:33:43 PM Ignore BREW9 Report Abuse ok