According to a new joint report issued by the US Department of
Homeland Security (DHS) and Federal Bureau of Investigation (FBI),
hackers have been penetrating the computer networks of companies
that operate nuclear power stations, energy facilities, and
manufacturing plants in the US since May 2017. The joint report
carried an urgent amber warning, which is the second-highest rating
for the sensitivity of a threat. The report was publicized by the
New York Times last week.
According to the report, an "advanced persistent
threat" actor was responsible for the attacks, which has
included thus far:
- Hackers writing targeted email messages containing fake resumes
for control engineering jobs and then sending them to senior
industrial control engineers who have access to critical industrial
control systems. The resumes were Microsoft Word documents that
contained malicious code. Once the recipient clicks on the
document, the attackers copy the recipient's