The federal government today charged seven Iranians with using a cyberattack to try to take over a New York dam. The Iranian hackers also allegedly targeted 46 of the nation's largest financial institutions, causing disruption to online services and making hundreds of thousands of Americans unable to access bank accounts online.
Federal investigators say that over the course of several weeks in 2013, one of the Iranian hackers repeatedly gained access to computers controlling key systems of the dam, located 29 miles from Manhattan. The dam was, at that time, out of service, but had it been operational, the hacker could have controlled the dam's water level, as well as its flow rate.
"These attacks were relentless, systemic, and widespread," said Attorney General Loretta Lynch, noting that the outcome "could have posed a clear danger to the public health and safety of Americans."
The seven men are now wanted by the FBI and their indictment comes as we're learning terror groups like ISIS are interested in hitting infrastructure targets, including nuclear power plants. After 9/11 security at U.S. nuclear plants was increased to defend against both cyber and traditional terror attacks. But there are more than 7,300 power plants in the U.S.
Perry Pederson led a project that took over and destroyed a diesel generator at a power plant. "It's not just getting in and getting out quickly. Malicious control is about getting in to a system and persisting," Pederson said. "I would be very concerned about a blended attack, one that uses cyber to perhaps soften the target, shutdown control systems or security systems, create openings that provide opportunity for physical attackers to then come on site."
Cyber attacks to the Federal Aviation Administration in early 2015 and incidents of traffic management systems being manipulated or shut down have increased industry’s call for better interagency relations with regard to cybersecurity. Coupled with the recent attacks in Brussels, Belgium, transportation security in general, always a concern, has assumed the global stage.
