Oak Ridge hit by cyber attack

An advanced persistent threat cyber attack forced Oak Ridge National Laboratory to shut down all Internet access and email systems.

04/26/2011


An advanced persistent threat cyber attack forced Oak Ridge National Laboratory (ORNL) to shut down all Internet access and email systems over the weekend.

Those restrictions will remain until lab officials and others investigating the attack are sure everything is back to normal, said ORNL Director Thom Mason early this week.

Mason said he expects email functions may come back online on a limited basis, with no attachments allowed and restrictions on length.

“We made the decision (around midnight Friday last week) to close down the connection to the Internet to make sure there was no data exfiltrated from the lab while we got the system cleaned up,” he said.

The lab’s cyber specialists had been monitoring the attack and recommended further action after it looked like efforts were under way to remove data from ORNL systems, Mason said.

Mason said the APT threat at ORNL is similar to attacks in recent times on Google, security company RSA, and other government institutions and corporations.

“In this case, it was initiated with phishing email, which led to the download of some software that took advantage of a ‘zero day exploit,’ a vulnerability for which there is no patch yet issued,” he said. The vulnerability involved Internet Explorer, he said.

Mason said the lab has not, to this point, detected any large-scale exfiltration of data, and the decision to shut down Internet access was to prevent any information to exit the building or to eliminate anything similar to a 2007 cyber attack at ORNL in which thieves stole large amounts of data. Following that event, the lab sent 12,000 letters to former lab visitors, informing them a thief may have stolen their Social Security numbers (although there were no subsequent reports of identity thefts or major problems).

Mason said they confiscated and quarantined some computers. He also confirmed the phishing email messages came in looking as though they were from the lab’s human resource department.



No comments
The Engineers' Choice Awards highlight some of the best new control, instrumentation and automation products as chosen by...
The System Integrator Giants program lists the top 100 system integrators among companies listed in CFE Media's Global System Integrator Database.
The Engineering Leaders Under 40 program identifies and gives recognition to young engineers who...
This eGuide illustrates solutions, applications and benefits of machine vision systems.
Learn how to increase device reliability in harsh environments and decrease unplanned system downtime.
This eGuide contains a series of articles and videos that considers theoretical and practical; immediate needs and a look into the future.
Big Data and IIoT value; Monitoring Big Data; Robotics safety standards and programming; Learning about PID
Motor specification guidelines; Understanding multivariable control; Improving a safety instrumented system; 2017 Engineers' Choice Award Winners
Selecting the best controller from several viewpoints; System integrator advice for the IIoT; TSN and real-time Ethernet; Questions to ask when selecting a VFD; Action items for an aging PLC/DCS
This digital report will explore several aspects of how IIoT will transform manufacturing in the coming years.
Motion control advances and solutions can help with machine control, automated control on assembly lines, integration of robotics and automation, and machine safety.
This article collection contains several articles on the Industrial Internet of Things (IIoT) and how it is transforming manufacturing.

Find and connect with the most suitable service provider for your unique application. Start searching the Global System Integrator Database Now!

Future of oil and gas projects; Reservoir models; The importance of SCADA to oil and gas
Big Data and bigger solutions; Tablet technologies; SCADA developments
SCADA at the junction, Managing risk through maintenance, Moving at the speed of data
Automation Engineer; Wood Group
System Integrator; Cross Integrated Systems Group
Jose S. Vasquez, Jr.
Fire & Life Safety Engineer; Technip USA Inc.
click me