Oak Ridge hit by cyber attack

An advanced persistent threat cyber attack forced Oak Ridge National Laboratory to shut down all Internet access and email systems.

04/26/2011


An advanced persistent threat cyber attack forced Oak Ridge National Laboratory (ORNL) to shut down all Internet access and email systems over the weekend.

Those restrictions will remain until lab officials and others investigating the attack are sure everything is back to normal, said ORNL Director Thom Mason early this week.

Mason said he expects email functions may come back online on a limited basis, with no attachments allowed and restrictions on length.

“We made the decision (around midnight Friday last week) to close down the connection to the Internet to make sure there was no data exfiltrated from the lab while we got the system cleaned up,” he said.

The lab’s cyber specialists had been monitoring the attack and recommended further action after it looked like efforts were under way to remove data from ORNL systems, Mason said.

Mason said the APT threat at ORNL is similar to attacks in recent times on Google, security company RSA, and other government institutions and corporations.

“In this case, it was initiated with phishing email, which led to the download of some software that took advantage of a ‘zero day exploit,’ a vulnerability for which there is no patch yet issued,” he said. The vulnerability involved Internet Explorer, he said.

Mason said the lab has not, to this point, detected any large-scale exfiltration of data, and the decision to shut down Internet access was to prevent any information to exit the building or to eliminate anything similar to a 2007 cyber attack at ORNL in which thieves stole large amounts of data. Following that event, the lab sent 12,000 letters to former lab visitors, informing them a thief may have stolen their Social Security numbers (although there were no subsequent reports of identity thefts or major problems).

Mason said they confiscated and quarantined some computers. He also confirmed the phishing email messages came in looking as though they were from the lab’s human resource department.



No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
System integration: Best practices and technologies to help; Virtualization virtues; Cyber security advice; Motor system efficiency, savings; Product exclusives; Road to Hannover
Collaborative robotics: How to improve safety, return on investment; Industrial Internet of Things, Industrie 4.0: World views; High-performance HMI, Information Integration: OPC and OMG
9 tips: How to integrate a servo system; Process control mathematical models; Serial network grounding; Engineers' Choice Awards; Learn from cyber security mistakes
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.
PLCs, robots, and the quest for a single controller; how OEE is key to automation solutions.
Learn how Industry 4.0 adds supply chain efficiency, optimizes pricing, improves quality, and more.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Getting to the bottom of subsea repairs: Older pipelines need more attention, and operators need a repair strategy; OTC preview; Offshore production difficult - and crucial
Digital oilfields: Integrated HMI/SCADA systems enable smarter data acquisition; Real-world impact of simulation; Electric actuator technology prospers in production fields
Special report: U.S. natural gas; LNG transport technologies evolve to meet market demand; Understanding new methane regulations; Predictive maintenance for gas pipeline compressors
click me