The World Energy Council recently warned the utility industry that one of the top threats to the energy sector is advanced malware attacks. The warning noted that the utility sector is vulnerable because of the size of the organizations, which lend them to have multiple networks, including industrial control systems, payment systems and customer service systems.
The four types of malware that utility operators should anticipate include:
-
Backdoor malware, which means that hackers establish a “backdoor” into the company’s network through remote access Trojans (RATs) and botnets and can reamin in the system undetected putting the entire system at risk.
-
Banking Trojans, which is malware that is typically used to access bank accounts by stealing login credentials. These Trojans are now being used to steal other types of online credentials, including in the energy sector.
-
Ransomware, which we all know has been increasing rapidly. It is used to encrypt the victim’s data and make it inaccessible until an amount of money (usually in Bitcoin or other virtual currency) is paid.
-
Wipers, which erase your data. It is spread like malware, and can lead to loss of control of the system or disable critical systems if a robust back up system is not in place.
The warning outlines the steps to combat the malware. This includes:
-
Establish the strongest perimeter defense possible.
-
Segmentation
-
Protect data and key operations through encryption, network monitoring and testing.
[View source.]
