A code associated with the Russian hacking operation dubbed Grizzly Steppe by the Obama administration has been detected within the system of a Vermont utility, according to U.S. officials.
While the Russians did not actively use the code to disrupt operations, according to officials who spoke on the condition of anonymity to discuss a security matter, the discovery underlines the vulnerabilities of the nation's electrical grid. Officials in government and the utility industry regularly monitor the grid because it is highly computerized and any disruptions can have disastrous implications for the country's medical and emergency services.
American officials, including one senior administration official, said they are not yet sure what the intentions of the Russians might have been. The incursion may have been designed to disrupt the utility's operations or as a test to see whether they could penetrate a portion of the grid.
Officials said that it is unclear when the code entered the Vermont utility's computers, and that an investigation will attempt to determine the timing and nature of the intrusion, as well as whether other utilities were similarly targeted.
"The question remains: Are they in other systems and what was the intent?" a U.S. official said.
This week, officials from the Department of Homeland Security, FBI and the Office of the Director of National Intelligence shared the Grizzly Steppe malware code with executives from 16 sectors nationwide, including the financial, utility and transportation industries, a senior administration official said. Vermont utility officials identified the code within their operations and reported it to federal officials Friday, the official said.
The DHS and FBI also publicly posted information about the malware Thursday as part of a joint analysis report, saying that the Russian military and civilian services' activity "is part of an ongoing campaign of cyber-enabled operations directed at the U.S. government and its citizens."
Another senior administration official, who also spoke on the condition of anonymity to discuss security matters, said in an email that "by exposing Russian malware" in the joint analysis report, "the administration sought to alert all network defenders in the United States and abroad to this malicious activity to better secure their networks and defend against Russian malicious cyber activity."
It is unclear which utility reported the incident. Officials from two major Vermont utilities, Green Mountain Power and Burlington Electric, could not be immediately reached for comment Friday. Vermont also has a wholesale distributor — Vermont Electric Power Company, or VELCO. In addition, there are smaller companies, such as Vermont Electric Cooperative and Washington Electric Co-op, that are used primarily in rural areas and are connected to the statewide power grid.
According to the report by the FBI and DHS, the hackers involved in the Russian operation used fraudulent emails that tricked their recipients into revealing passwords.
Russian hackers earlier obtained a raft of internal emails from the Democratic National Committee, which were later released by WikiLeaks during this year's presidential campaign.
President-elect Donald Trump has repeatedly questioned the veracity of U.S. intelligence pointing to Russia's responsibility for hacks in the run-up to the Nov. 8 election. He has also has spoken highly of Russian President Vladimir Putin, despite President Obama's suggestion that the approval for hacking came from the highest levels of the Kremlin.
Obama has been criticized by lawmakers from both parties for not retaliating against Russia before the election. But officials said the president was concerned that U.S. countermeasures could prompt a wider effort by Moscow to disrupt the counting of votes on Election Day, potentially leading to a wider conflict.
Officials said Obama also was concerned that taking retaliatory action before the election would be perceived as an effort to help the campaign of Democratic presidential nominee Hillary Clinton.
On Thursday, when Obama announced new economic measures against Russia and the expulsion of 35 Russian officials from the United States in retaliation for what he said was a deliberate attempt to interfere with the election, Trump told reporters, "It's time for our country to move on to bigger and better things."
Trump has agreed to meet with U.S. intelligence officials next week to discuss allegations surrounding Russia's online activity.
Russia has been accused in the past of launching a cyberattack on Ukraine's electrical grid, something it has denied. Cybersecurity experts say a hack in December 2015 destabilized Kiev's power grid, causing a blackout in part of the Ukrainian capital. On Thursday, Ukranian President Petro Poroshenko accused Russia of waging a hacking war on his country that has entailed 6,500 attacks against Ukranian state institutions over the past two months.
Representatives for the Energy Department and DHS declined to comment Friday.
Alice Crites contributed to this report.
Read more:
Putin says he won't deport U.S. diplomats as he looks to cultivate relations with Trump
Trump praises Putin's response to sanctions, calls Russian leader 'very smart!'
The luxurious, 45-acre compound in Maryland being shut down for alleged Russian espionage
No comments:
Post a Comment