Russian Cyber Attacks on our Infrastructure

FBI Warns of Russian Cyber Hackers Targeting Critical US Infrastructure

Russian hackers have been caught accessing the computer networks of critical U.S. infrastructure

For some of you out there who believe Putin and Russia is not our enemy:

The FBI warned the public on Aug. 20 that Russian hackers had breached computer systems at manufacturing plants, power grids, water treatment facilities, and other critical infrastructure in the United States.

Hackers tied to Russia’s Federal Security Service were caught by the FBI using cyberattacks to get into computer networks targeting a wide range of critical infrastructure and other organizations in the United States and across the world.

By gaining access to the devices over the past year, the hackers were able to steal configuration files for thousands of networking devices associated with U.S. entities across critical infrastructure sectors, the FBI said.

The hackers also used the unauthorized access to look around and collect intelligence in their victims’ networks, which revealed their interest in protocols and applications in control systems.

Read more of the Russian cyber espionage

Artificial Intelligence has all sorts of nefarious possibilities

New AI “agents” could hold people for ransom in 2025

A paradigm shift in technology is hurtling towards us, and it could change everything we know about cybersecurity. Uhh, again, that is.

When ChatGPT was unveiled to the public in late 2022, security experts looked on with cautious optimism, excited about the new technology but concerned about its use in cyberattacks. But two years on, much of what ChatGPT and other generative AI chat tools offer attackers is a way to improve what already works, not new ways to deliver attacks themselves.

And yet, if artificial intelligence achieves what is called an “agentic” model in 2025, novel and boundless attacks could be within reach, as AI tools take on the roles of “agents” that independently discover vulnerabilities, steal logins, and pry into accounts.

These agents could even hold people for ransom by matching stolen data online with publicly known email addresses or social media accounts, composing messages and holding entire conversations with victims who believe a human hacker out there has access to their Social Security Number, physical address, credit card info, and more.

And if the model works for individuals, there’s little reason it wouldn’t work for individual business owners.

Click here to download the Report from Malwarebytes

We are the number one target for Cyber attacks by our enemies

'We are clearly under attack': Threats to U.S. critical infrastructure from China on the rise

Critical infrastructure in the U.S. is being threatened by the Communist Chinese government and many Americans are both oblivious and underprepared. Check Points Software Technologies recently reported "a 75 percent increase in global cyber-attacks during the third quarter [of 2024], with a 15 percent rise from the previous quarter."

And in the U.S., Industrial Cyber points out alarmingly that "cyberattacks have risen by 56 percent year-over-year, with a weekly average of 1,300 attacks per organization, 10 percent higher than the previous quarter." The area with the most attacks was the education and research sector.

While this is important, a surge in cyber-attacks against critical infrastructure has garnered the attention of many, including Craig Huey, an AI expert, political commentor and author of "The Great Deception," which highlights various AI dangers. Huey spoke to WorldNetDaily about the threat to critical infrastructure, including the reported 30 percent increase in cyber attacks the last year.

The primary target, Huey affirms, is the United States of America. According to Huey, the nation's electric grid, oil pipelines and its water, transportation and banking systems, as well as its telecommunications network, are all at extreme risk.

"And right now, watching the messaging from the Cybersecurity and Infrastructure Security Agency (CISA) and the FBI," he argued, "we are clearly under attack".

Read more...

Read what Chris Wray said in September

DOJ preparing criminal charges against Iranian Hackers

DOJ to File Charges Against Iranian Hackers for Cyberattack on Trump Amid Rising U.S.-Iran Tensions

The Department of Justice plans to charge Iranian hackers for a cyberattack on Trump, marking a significant stance against foreign election interference.

At a Glance--

• Attorney General Merrick Garland addressed U.S. Attorneys on Sept. 12, 2024.

• The DOJ readies charges for an Iranian hack targeting Trump’s campaign.

• Iranian actors stole and distributed sensitive Trump campaign documents.

• The FBI and other agencies attribute the hack to Iranian efforts to influence the election.

Is this war? State of Emergency was called

Russian cyber attackers hack Texas Panhandle drinking water and flood town in first-ever raid by 'Kremlin aligned' group

CARR, formerly Sandworm, is just a front for the GRU

• If true, the hack would be the first-ever disruption of a US water system by Russia

• Others like Iran and China have already been accused, and feds are investigating

• A hacking group allied with the Russian government took credit for the scandal

Russian hackers claiming to be backed by the Kremlin are believed to have remotely accessed a Texas town's water tower.

The suspected hack in the Texas Panhandle town in January would be the first-ever disruption of a US drinking water system by Russia, after Iran and China - behind similar attacks - have already been called out.

The hack in Muleshoe, a community of 5,000 not far from the New Mexico border, led to the tower overflowing for almost an hour.

Read more and see the video

I had not heard about this before.

Cyberattack at Medical provider

Medical provider Akumin turning away patients after apparent cyberattack

Akumin shut down its computer system, leaving patients unable to get scans and doctors unable to see images for diagnosis.

LAKE WORTH BEACH, Fla. — Akumin, a South Florida-based outpatient radiology and oncology company, has shut down its computer system, leaving patients unable to get scans and doctors unable to see images for diagnosis.

Akumin does business with medical scans and radiology services for about 1,000 hospitals and health systems in 48 states. It has offices in Lake Worth Beach at 5051 South Congress Ave Lake Worth, Wellington and Boca Raton. Its headquarters are in Plantation.

Read more...

Cyber Threats and Digital Security now at risk

China-Based Hackers Impersonated US Voters With AI-generated Propaganda During 2022 Elections: Microsoft

And President Biden sought to downplay friction with China while in Vietnam

Know thy enemy!

China-based hackers impersonated American voters online and used artificial intelligence (AI) to create and promote divisive online content during the 2022 midterm elections, according to a report by Microsoft.

The effort was part of a series of covert influence operations by the Chinese Communist Party (CCP) intended to mimic U.S. voters from across the political spectrum and create controversy along racial, economic, and ideological lines, according to the Sept. 7 report.

“Ahead of the 2022 U.S. midterms, Microsoft and industry partners observed CCP-affiliated social media accounts impersonating U.S. voters—new territory for CCP-affiliated [influence operations],” the report reads.

The Report

Beginning in May 2023, Storm-0558, a China-based threat actor, accessed Microsoft customer email accounts of approximately 25 organizations including U.S. and European government entities. Microsoft assesses this activity was likely conducted for espionage purposes and has successfully blocked this campaign.

Communist China hackers targeting major telecommunications companies and network service providers

CCP Hackers Caught Targeting US Telecom Companies

U.S. security agencies have put out the alert that hackers backed by the Chinese government have actually been targeting “major telecommunications companies and network service providers” since 2020.

In a June 7 cybersecurity advisory, they advised those impacted to take instant therapeutic action.

They advised prospective victims to support their networks by using immediate patches, updating infrastructure, and disabling unnecessary ports and protocols.

America's Cyber Defense Agency

Chinese Hack Attack

China Still Has Backdoor Access…

Not only did China hack “sensitive U.S. computer networks,” it seems they still have back door access. We’ve been targeted for months and one “top American cyber official” is “concerned” about the “scope and scale” of the intrusion.

Access to critical services

The current situation, National Security Agency Director of Cybersecurity Rob Joyce screams, is “unacceptable” because digital ninja’s “sought access to networks that might allow them to disrupt critical services in the future.”

The Chinese hack attack most recently revealed isn’t one of the ordinary snatch the data and go variety. This one was clearly backed by Beijing and “targeted key U.S. sectors like maritime and transportation networks.” That’s not good because we have a war brewing with them.

Read about it...

We have thousands of high paid tech savvy engineers in Silicon Valley. Why can't anyone write a program to stop this cyber hacking? This continues to happen and now with Biden's open door policy at our border, Chinese illegals are entering by the thousands. Only 1,970 illegal migrants from the People’s Republic of China were caught at the southern border by CBP throughout the entire 2022 fiscal year. How many got away? How many have entered our country this year? What are they up to? Biden and Democrats must take this invasion seriously.

Chinese malicious cyber activities

CCP Hackers Caught Targeting US Telecom Companies

U.S. security agencies have put out the alert that hackers backed by the Chinese government have actually been targeting “major telecommunications companies and network service providers” since 2020.

In a June 7 cybersecurity advisory, they advised those impacted to take instant therapeutic action.

The advisory, coauthored by the National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the Federal Bureau of Investigation (FBI), stated the hackers “continue to exploit publicly known vulnerabilities,” utilizing techniques to bypass defenses and keeping themselves unnoticed.

The agencies mentioned that the hackers presumably used open-source tools, such as RouterSploit and RouterScan, and understood software application defects in networking gadgets such as routers.

Read about it...

Cyber Crime

DOJ: Russian Hackers Compromised Dozens of Federal Attorney's Offices

The Russian-based hackers behind last year’s SolarWinds cyberattack were also able to breach email accounts used in the offices of prominent federal prosecutors, according to the Justice Department.

The Associated Press reported Saturday that 80 percent of the Microsoft email accounts used by the four U.S. attorney’s offices in New York were targeted and compromised.

Read more...

What will Attorney General Merrick Garland do about it?

Russia engaging in cyber war?

Russia ‘Cozy Bear’ Breached GOP as Ransomware Attack Hit

Russian government hackers breached the computer systems of the Republican National Committee last week, around the time a Russia-linked criminal group unleashed a massive ransomware attack, according to two people familiar with the matter.

Supposedly, Russian government hackers breached the DNC back in 2016.

Read about it...

Cyber Hackers

HACKERS STRIKE AGAIN!

Insurance Company Forced to Pay HUGE Ransom After Holding Network Hostage

When they say "huge" it was ten times that of Colonial pipeline.

"Chicago-based CNA Financial, one of the top insurance companies in the United States, reportedly paid a $40 million USD ransom after getting hacked.

According to reports, hackers broke into the company’s network using Phoenix Locker, malware with links to Russia. Once they took over, they locked CNA out. After two weeks, CNA allegedly forked over the money to regain access. The company confirmed the attack but wouldn’t comment on whether or not they’d paid to end it."

Is President Biden going to address this at the summit with Vladimir Putin on June 16? Biden called Putin a "killer"...so much for detente.

Read about it...

So, who really paid the $5 million ransom to "Dark Side?"

The company paid the ransom in “untraceable cryptocurrency,” according to the outlet, and the Biden administration was aware that the company intended to pay the $5 million to hackers the White House suggested, Wednesday, could be Russian or affiliated with Russia. The group, which admitted they were responsible for locking up Colonial Pipeline’s servers on Monday, claims they are not affiliated with any government and that their motivation is primarily financial, not political.

Media outlets insisted, earlier this week, that Colonial Pipeline had no intention of paying the nearly $5 million that DarkSide demanded to release the clogged server. Fox Business reported Wednesday that “the pipeline operator refused to pay, enlisting help from the Department of Energy, as well as federal, state and local authorities instead.”

Biden Goes Against FBI Policy on Cyber Hijackers

GAS HACKERS! Biden Would Rather Take The Cowards Way Out

Following the attack on the Colonial Pipeline via ransomware, An official with Biden’s White House who is the deputy adviser on national security for cyber and emerging technologies stated that private companies should just pay off the terrorist hackers ransomware demands.

Of course, this goes against the current FBI policy that these companies should not do so. This statement has ignited the cybersecurity experts to harshly criticize the White House.

FBI: How to Respond and Report

The FBI does not support paying a ransom in response to a ransomware attack. Paying a ransom doesn’t guarantee you or your organization will get any data back. It also encourages perpetrators to target more victims and offers an incentive for others to get involved in this type of illegal activity.

If you are a victim of ransomware:

Contact your local FBI field office to request assistance, or submit a tip online.
File a report with the FBI’s Internet Crime Complaint Center (IC3).

Read about it...

The Network Gang --The Darkside - Russian Hackers

Colonial Pipeline Cyber-Attacker Unmasked By The FBI

The operator of the country’s largest fuel pipeline, Colonial Pipeline, fell victim to a cybersecurity attack on Friday that involved ransomware, forcing it to temporarily shut down all pipeline operations and raising concern that the outage could lead to spot shortages of gas, diesel and jet fuel. CNBC's Brian Sullivan reports.

Cyber attack on U.S. Gas Pipeline

Cyber-Attack Shuts Down Biggest Gasoline Pipeline in US–Colonial Pipeline

Top U.S. fuel pipeline operator Colonial Pipeline has shut its entire network, the source of nearly half of the U.S. East Coast’s fuel supply, after a cyber attack that the company said was caused by ransomware.

Cybersecurity vulnerabilities have become a systemic issue,” said Algirde Pipikaite, cyber strategy lead at the World Economic Forum’s Centre for Cybersecurity.

“Unless cybersecurity measures are embedded in a technology’s development phase, we are likely to see more frequent attacks on industrial systems like oil and gas pipelines or water treatment plants,” Pipikaite added.

Read about it...

We are spending trillions of dollars, a lot on pork, but we can't combat cyber attacks? This one is a national threat.

FBI on the Trail and AG Barr is on the Case

Barr warns of ‘severe’ consequences for foreign governments who interfere in US coronavirus response

The attorney general’s warning came amid a cyberattack targeting the U.S. Department of Health and Human Services (HHS), as well as an alleged foreign disinformation campaign to stir panic in the United States, the AP reported. Barr did not say which government was involved, but the Trump administration has notably been involved in a war of words with China over the pandemic.

Read all about it...

Is it a coincidence or a cyber attack?

My friend Gary posed this question yesterday. It is something that has crossed the minds of many Americans. The United States Navy has now ordered an investigation into the possibility of a cyber attack on the USS John McCain that caused a gaping  hole in the ship along with 10 missing sailors. Included in that investigation will be the earlier incident involving the USS Fitzgerald.

Read about it...

Florida Concealed Weapons Holders database hacked

By: Associated Press
May 23, 2017

TALLAHASSEE, Fla. (AP) -- Officials say hackers may have obtained the names of more than 16,000 people who have Florida concealed weapon permits

The Department of Agriculture and Consumer Services announced Monday they had discovered a data breach of the online payment system that processes payments for applications and permits.
Agriculture Commissioner Adam Putnam has ordered a review of the department's cybersecurity measures. State law enforcement is investigating the breach, which authorities suspect originated from overseas.

The agency stated that no financial information was obtained.

The department also warned that the breach may have revealed the social security numbers of 469 customers. The agency plans on offering free credit protection for one year to these individuals.

The Florida Legislature in 2006 passed a law that made the names of concealed weapon permit holders confidential.

Damn, I'd better load this thing.