ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Prices
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


IT Jobs

Security threats Toolkit

Global Tech Threats

CIA: Cyberattack caused multi-city blackout

Tom Espiner ZDNet.co.uk

Published: 21 Jan 2008 12:58 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The CIA has said that a cyberattack caused a power blackout in multiple cities in a country outside the US. Security training body the Sans Institute reported the CIA's disclosure on Friday.

CIA senior analyst Tom Donahue told a Sans Institute conference in New Orleans on Wednesday that the CIA had evidence of successful cyberattacks against various countries' critical national infrastructures.

"We have information that cyberattacks have been used to disrupt power equipment in several regions outside the US," said Donahue. "In at least one case, the disruption caused a power outage affecting multiple cities."

Donahue added that the CIA does not know who executed the attacks or why, but that all of the attacks involved "intrusions through the internet".

The CIA analyst added that his organisation had evidence of blackmail demands following demonstrations of successful intrusions.

Read this

Feature
Feature: Cracking open the cybercrime economy

Hacking for fun has evolved into hacking for profit, and created a business model that is nearly as sophisticated as that of legal software

Read more +

"We have information, from multiple regions outside the US, of cyber-intrusions into utilities, followed by extortion demands," said Donahue. "We suspect, but cannot confirm, that some of these attackers had the benefit of inside knowledge."

The CIA does not normally make this information public. According to Donahue, the CIA actively and thoroughly considered the benefits and risks of making this information public, and came down on the side of disclosure, the Sans Institute reported.

Alan Paller, director of research at the Sans Institute, warned over three years ago about demonstrations of denial of service to computer systems, followed by demands for cash.

  • Email
  • Trackback
  • Clip Link
  • Print friendly Print with HP

Did you find this article useful?
3 out of 5 people found this useful


Full Talkback thread

1 comment

  1. oops wilyfox

More in this Special Report

Governments prepare for 'cyber cold war'

Governments prepare for 'cyber cold war'

There has been a sea change over the past year in the amount of government-sanctioned cyber-espionage, according to some security experts. more

MI5 warns of Chinese digital espionage

MI5 warns of Chinese digital espionage

MI5 has issued a warning to UK businesses that spies in China are conducting a campaign of cyber-espionage against them. more

Burglars plunder Verizon's London data centre

Burglars plunder Verizon's London data centre

Criminals posing as policemen conned their way into a data centre near London's King's Cross station, tying up staff and stealing computing equipment, the Metropolitan Police said on Friday. more

Cyberterrorism: Myth or reality?

Cyberterrorism: Myth or reality?

Following recent accusations of government-sanctioned digitial espionage and alleged hacking attacks from China and Russia, there seems to be evidence that countries are capable of using electronic means to disrupt the computer systems of rival nations. more

Explaining the Estonian cyberattacks

Explaining the Estonian cyberattacks

When it comes to denial-of-service attacks, Jose Nazario has seen just about everything. more

The worst IT security incidents of 2007

The worst IT security incidents of 2007

Despite the message being driven home by governments, consumer groups and industry bodies that IT security is paramount, this year has thrown up a worrying number of serious breaches. more

Cracking open the cybercrime economy

Cracking open the cybercrime economy

Hacking for fun has evolved into hacking for profit, and created a business model that is nearly as sophisticated as that of legal software more

Countering corporate espionage

Countering corporate espionage

Theft of commercially valuable information costs the world's largest companies over £22bn a year, and small firms are just as vulnerable. How can you mitigate the risks to your company? more

Anatomy of a hack attack

Anatomy of a hack attack

With the help of security experts we reconstruct a typical hack attack on two large organisations and walk through the steps that the head of IT should follow in such a case more

Storm worm anniversary brings fresh variants

Storm worm anniversary brings fresh variants

The first anniversary of the Storm worm has brought a fresh wave of variants, security companies have warned more

CIA: Cyberattack caused multi-city blackout

CIA: Cyberattack caused multi-city blackout

The CIA has warned of successful attacks against various countries' critical national infrastructures more

Schneier: Cyber-extortion on the rise

Schneier: Cyber-extortion on the rise

The security expert has warned of an increase in cyber-extortion, but added there is no need for panic about attacks on critical national infrastructures more

Company/Topic Alerts

Create a new alert from the list below:







Related Jobs

Senior Test Manager - Cash & Trade, Tier 1 Banking

Working specifically on the Cash & Trade portfolio applications in the Global Transaction department, you will be responsible for the system and ...

S51873: Cash Management Analyst Programmer

Cash Management Analyst Programmer Knutsford, Cheshire competitive depending on experience (+exceptional benefits) Purpose of Role The role is on an ...

C++ Developer needed with FX or Cash Equities-Financial Software House

C++ Developer needed with FX or Cash Equities-Financial Software House My client based in London is looking for a strong C++ Developer to join a ...

Sentry Posts Blog

Mobile Linux Better For Mobile Busines...

Mobile Linux Better For Mobile Business Apps? Author: Eric Everson, MyMobiSafe.com As mobile Linux is carving it’s footprint on the future of mobile application development, the... More

Post a comment

DWP downplays security breach

The Department for Work and Pensions (DWP) has admitted that some of its staff have been forwarding passwords with password protected material. An email that was leaked on the 'Dizzy... More

Post a comment

How many headshots does one chairperso...

We got a strange request last week from the head of PR from Russian security experts Kaspersky. It seems although the company was very happy with the interview we recently carried with... More

Post a comment

Featured Talkback

On the contrary, if vendors were forced to stand behind their products it should increase innovation. It would force more, and better , testing before hitting the sales floor, resulting in fewer updates and less downtime for the consumer. At present the EULA removes responsibility from the vendor, and moves it to the user, which is a step backward. Make the vendor responsibility for their code.

By: ator1940

Read full story:
RSA: Vendor liability may stifle innovation