Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cyberwarfare

U.S. Planted Powerful Malware in Russia’s Power Grid: Report

The New York Times reported over the weekend that the United States planted potentially destructive malware in Russia’s electric power grid, but President Donald Trump has denied the claims.

The New York Times reported over the weekend that the United States planted potentially destructive malware in Russia’s electric power grid, but President Donald Trump has denied the claims.

The newspaper has learned from current and former government officials that the U.S. has been probing control systems of the Russian power grid since at least 2012 as part of reconnaissance operations. However, the officials claimed the U.S. recently ramped up its efforts and started launching more offensive activities that involve placing “potentially crippling malware […] at a depth and with an aggressiveness that had never been tried before.”

According to The New York Times, these hacking operations area meant as a warning to Russian President Vladimir Putin and appear to show how the White House is using new authorities granted last year to the U.S. Cyber Command. There is no evidence that the planted malware was actually used to cause any disruption.US hacking Russia's power grid

U.S. government agencies contacted by the newspaper did not comment on the allegations, but President Trump said on Twitter that the story was not true.

“Do you believe that the Failing New York Times just did a story stating that the United States is substantially increasing Cyber Attacks on Russia. This is a virtual act of Treason by a once great paper so desperate for a story, any story, even if bad for our Country,” Trump wrote.

“ALSO, NOT TRUE! Anything goes with our Corrupt News Media today. They will do, or say, whatever it takes, with not even the slightest thought of consequence! These are true cowards and without doubt, THE ENEMY OF THE PEOPLE!” he added.

Learn More About Threats to the Energy Sector at SecurityWeek’s 2019 ICS Cyber Security Conference

Two officials told The Times that they believed Trump had not been briefed in detail about the steps to plant malware inside Russian systems due to concerns over his reaction and the possibility that he could either cancel the operation or discuss it with foreign officials.

However, national security adviser, John Bolton, did say last week that Russia or anyone else engaged in cyber operations against the United States “will pay a price.”

Advertisement. Scroll to continue reading.

There have been several confirmed and unconfirmed reports describing cyberattacks launched by the U.S. against its adversaries, including North Korea, Iran and the Islamic State. However, when it comes to Russia, the United States has mostly played the victim, often accusing Moscow — directly or indirectly — of launching cyberattacks and online misinformation campaigns.

There have been reports of Russia-linked hackers targeting control systems in energy facilities in the U.S. and, most recently, a threat actor with apparent ties to a Russian government-backed research institute was spotted targeting electric utilities in the United States and the Asia-Pacific region.

Recent disruptions to electrical grid operations in the United States have been blamed on a denial-of-service (DoS) incident, but no power outages were reported and the incident was apparently not part of a coordinated hacking operation.

Related: Cyberattacks Against Energy Sector Are Higher Than Average

Related: US Accuses Russian Government of Hacking Infrastructure

Related: Russian Cyberspies Hacked Routers in Energy Sector Attacks

Related: Energy Sector Most Impacted by ICS Flaws, Attacks

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Understand how to go beyond effectively communicating new security strategies and recommendations.

Register

Join us for an in depth exploration of the critical nature of software and vendor supply chain security issues with a focus on understanding how attacks against identity infrastructure come with major cascading effects.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

CISO Conversations

Joanna Burkey, CISO at HP, and Kevin Cross, CISO at Dell, discuss how the role of a CISO is different for a multinational corporation...

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...

CISO Conversations

In this issue of CISO Conversations we talk to two CISOs about solving the CISO/CIO conflict by combining the roles under one person.