One Password Allowed Hackers to Infiltrate Colonial Pipeline, CEO Says

0
Loading...

The head of Colonial Pipeline told US senators on Tuesday that hackers who launched last month’s cyber attack against the company and disrupted fuel supplies to the US Southeast were able to get into the system by stealing a single password.

Colonial Pipeline Chief Executive Joseph Blount told a US Senate committee that the attack occurred using a legacy Virtual Private Network (VPN) system that did not have multifactor authentication in place. That means it could be accessed through a password without a second step such as a text message, a common security safeguard in more recent software.

“In the case of this particular legacy VPN, it only had single-factor authentication,” Blount said. “It was a complicated password, I want to be clear on that. It was not a Colonial123-type password.”

Loading...

The panel was convened to examine threats to critical US infrastructure and the Colonial attack, which shut key conduits delivering fuel from Gulf Coast refineries to major East Coast markets. Cyberattacks also hit US meatpacking plants owned by JBS, showing the breadth of infrastructure facing cyber threats.

The Colonial Pipeline hack demonstrated that much of the company’s infrastructure remains highly vulnerable and the government and companies must work harder to prevent future hacks, senators said during the hearing.

Security experts call the use of a single-factor login system a sign of poor cybersecurity “hygiene.” They recommend two-factor authentication, which requires a secondary measure like a mobile text or hardware token, and most major companies require this across all internal applications.

Loading...

Senators questioned Blount about the company’s preparations and the timeline for responding to the ransomware attack, which shut the line for days and led to a spike in gasoline prices, panic buying and localised fuel shortages.

“I’m alarmed this breach ever occurred in the first place,” said Senator Gary Peters, the committee’s chairman. “Make no mistake: if we do not step up our cyber security readiness, the consequences will be severe.”

The FBI attributed the hack to a gang called DarkSide. Some senators suggested Colonial had not sufficiently consulted with the US government before paying the ransom against federal guidelines.

Loading...

Blount said he made the decision to pay ransom and to keep the payment as confidential as possible because of concern for security.

“It was our understanding that the decision was solely ours to make about whether to pay the ransom,” he said.

Blount said Colonial did not have a plan in place to prevent a ransomware attack, but did have an emergency response plan. The company notified the FBI within hours.

Loading...

Blount said Colonial has invested over $200 million (roughly Rs. 1,460 crores) over the last five years in its IT systems. When pressed to answer how much Colonial has spent to keep its pipeline cyber secure, Blount repeated that amount. A company spokesperson later clarified the $200 million (roughly Rs. 1,460 crores) was for IT overall, which includes cyber security.

On Friday, US Deputy Attorney General Lisa Monaco urged companies to tell federal authorities whether they paid ransom to cyberattackers, information that can help investigators.

Blount said even after getting the key from the hackers, the company is still recovering from the attack and is bringing back seven finance systems that have been offline since May 7.

Loading...

On Monday, the Justice Department said it had recovered some $2.3 million (roughly Rs. 16 crores) in cryptocurrency ransom paid by Colonial Pipeline.

Colonial Pipeline previously had said it paid the hackers nearly $5 million to regain access. The value of the cryptocurrency bitcoin has dropped to below $35,000 (roughly Rs. 40 crores) in recent weeks after hitting a high of $63,000 (roughly Rs. 46 lakhs) in April.

As a result, the government recovered about 60 of the 75 Bitcoin paid, but the value has dropped, falling short of the total dollar amount Colonial paid.

Loading...

Seizures of Bitcoin, priced in India at 12:30pm IST on June 9 at Rs. 24.5 lakhs, are rare, but authorities have stepped up their expertise in tracking the flow of digital money as ransomware has become a growing national security threat and put a further strain on relations between the United States and Russia, where many of the gangs are based.

© Thomson Reuters 2021


Interested in cryptocurrency? We discuss all things crypto with WazirX CEO Nischal Shetty and WeekendInvesting founder Alok Jain on Orbital, the Gadgets 360 podcast. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, Amazon Music and wherever you get your podcasts.

Stay connected with us on social media platform for instant update click here to join our  Twitter, & Facebook

Loading...

We are now on Telegram. Click here to join our channel (@TechiUpdate) and stay updated with the latest Technology headlines.

For all the latest Technology News Click Here 

 For the latest news and updates, follow us on Google News

Loading...

Read original article here

Denial of responsibility! TechAzi is an automatic aggregator around the global media. All the content are available free on Internet. We have just arranged it in one platform for educational purpose only. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, all materials to their authors. If you are the owner of the content and do not want us to publish your materials on our website, please contact us by email – [email protected]. The content will be deleted within 24 hours.

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More