ENER Breaking: Alpharetta based Colonial Pipeline shuts down gas lines after cyberattack - FBI says Russia Russia Russia

Plain Jane

Just Plain Jane
And by Monday afternoon...
  • BIDEN: NO EVIDENCE THAT RUSSIA IS INVOLVED IN PIPELINE HACK

So once again despite the already ubiquitous "Russia hack" headlines still flooding the internet, the cyberbreach using Darkside ransomware could literally have anyone in possession of the tool behind it.

Multiple reports are now softening the initial 'Russia hack' claims from late Sunday and earlier Monday, describing instead a more ambiguously worded "criminal gang" scenario which might be tied to Russia.
 

phloydius

Veteran Member
Anyway, with a pipe connecting everything, seems to me they could come up with some scheme that would make them totally invulnerable to hacking because nobody could get at it. Maybe when they lay new pipe, a fiber optic cable buried right along side that connected the computers.

Would not solve the problem. It is what those fiber optics and and computers connect to, namely networks, internet, and employees.
 

Troke

On TB every waking moment
Would not solve the problem. It is what those fiber optics and and computers connect to, namely networks, internet, and employees.
With a continuous fiber optic connection, why the Net? As for employees, a tad more difficult to do from Moscow.
 

phloydius

Veteran Member
With a continuous fiber optic connection, why the Net? As for employees, a tad more difficult to do from Moscow.

I believe they shouldn’t use the net, but many companies do (but I do not know if this company does). Most want to use the internet to allow employees to be able to work from a non-hardwired physical location, management, be able to feed information to government regulators or 3rd parties, have non-local specialist to trouble shoot issues, etc. Also it is cheaper to offload all those infrastructure costs to someone else. Wireless is a nice feature too, so that the employees can use tablets or laptops to work, instead of hardwired big physical desktops that don’t move. Example: pressure starts getting too high, so the system sends an email to everyone that needs to know ASAP regardless of where they are, so that it can be fixed.

But even if they did go with a completely closed system (and they should be), any computer could easily be compromised with a disk, usb drive, or any other input device either accidentally or intentionally by an employee. Want to copy a document to take it home to work on it? Oops, just installed ransomware or virus. Want I.T. to install an update? Oops, just spread a virus. And many more...

Oh, and that all assumes that the computer hardware you are using on that closed network didn’t have chips in it that were compromised before it even left the factory.
 

Cyclonemom

Veteran Member
I wonder if Colonial had SolarWinds software installed at the time that was hacked?

Might have left a handy back door......
 

9idrr

Veteran Member
I once did an audit where I worked on a company procedure to back-up the critical mainframe computer system at regular intervals and store the back ups at an off site location. It turned out the IT guy just laughed about the notion of 'off-site' and informed me that back-ups took a really long time and 'those tapes' are expensive.
Actually, many years ago I worked for a large utility who backed up every 24 hours. Usually 15-25 tapes on reels like the old movie film. Rotated the latest to a site a couple of miles away, the tapes taken there the day before went to another site about 20 miles in another direction. Earliest ones came back to hold the next day's copy. Of course, those 'puters ran off of punch cards.
Kids, ask your grandparents what a punch card is.
 

Troke

On TB every waking moment
Actually, many years ago I worked for a large utility who backed up every 24 hours. Usually 15-25 tapes on reels like the old movie film. Rotated the latest to a site a couple of miles away, the tapes taken there the day before went to another site about 20 miles in another direction. Earliest ones came back to hold the next day's copy. Of course, those 'puters ran off of punch cards.
Kids, ask your grandparents what a punch card is.
Heh. Spent many a happy (?) hour punching cards. An IBM 360, I think. Thing filled the room. Had to be careful not to punch in a continuous loop. Sure made the printer run when you did that.
 

phloydius

Veteran Member
This may be absolutely dumb, but why don't these companies put their operational and production side on a separate and air gapped network? Then nobody can bust in on your production.

BTW, I think the Russian thing is pure B.S.

See post 251 above you for some info on ”why”.
 

Henry Bowman

Veteran Member
This may be absolutely dumb, but why don't these companies put their operational and production side on a separate and air gapped network? Then nobody can bust in on your production.

BTW, I think the Russian thing is pure B.S.
You are only saying that because you are smart and know the FBI lies like the filthy stinking child murdering scum bags that they are.
 

LoupGarou

Ancient Fuzzball
A lot of places are getting hit by both email attacks, and RDP sessions left poorly secured in the last week. And this is just the beginning. I have heard reports from others that millions of emails per HOUR are hitting user's accounts in attempts of getting into medium and larger sized businesses. And they are not just stopping with windows machines as they know that BYOD is poorly implemented in a lot of businesses so they are attacking android and IOS devices as well. Phobos and it's variants are the weapon of choice at the moment, as they have just released four new ones that STILL don't have a public decryption tool.

Do your (image) backups. Do them today (tonight). And make SURE you keep them OFFLINE from any system. You can buy a 10TB desktop USB drive for under $300 and backup all sorts of systems with it if you have a business. You can buy a 2TB NVME SSD for about the same and do nightly backups of your important user machines VERY QUICKLY. This is bad. And we are just now seeing the first volleys of fire in this war. Expect these attacks to escalate EXPONENTIALLY as they get more and more brazen and see the end of the line for the world economy and they want their piece of it (or to cause it).

Next little words of warning: There is NO getting around what they are doing if you are hit. And the likelihood that they will actually decrypt anything is next to ZERO even if you pay them. And if you DO pay them, or even contact them, you should also expect to have to contact and pay them again as they will put their copy of your info up for sale on the dark web.
 

Groucho

Has No Life - Lives on TB
See post 251 above you for some info on ”why”.
Totally understand what you're presenting. I'd love to say, "yeah but," however my expertise is not here. Even the production sector couldn't be totally closed loop? Yeah, things would really have to change.
A change has to be made in these large systems. The smooth and proper operation of this country are at stake.
 

mistaken1

Has No Life - Lives on TB
They are trying to regulate something already connected...by pipes. As everybody here must know, I am about as computer illiterate as they come even though I do have a Linux programmed computer. ( I mess around with it)

Anyway, with a pipe connecting everything, seems to me they could come up with some scheme that would make them totally invulnerable to hacking because nobody could get at it. Maybe when they lay new pipe, a fiber optic cable buried right along side that connected the computers.

For the most part businesses do not build out their own networks .... the use the cloud aka somebody else's network (they think they are saving money and adding security by doing so, who says marketing does not work).

You know who else uses the cloud? The hackers.
 

vector7

Dot Collector
View: https://twitter.com/stillgray/status/1391913648918994947


giphy.gif
 

Raggedyman

Res ipsa loquitur
Some random people (this afternoon) on the internet on the internet who could just as easily be lying, are saying they are seeing stations run out of one type of gas or another in NC, GA, & TN. Any one here that can give a first hand report, or from someone they know (or local news)?

I can tell you that at 6:15 tonight an individual in our MAG called the house and said the EVERY station in his part of Haywood Cty NC was either out of gas or about to be with cars lined up from the pumps and out to the road. at that time gas was $3.00/ gal - up from $2.85 the evening before (Sunday)

I've know this guy 20 yrs and I have never heard him so angry at what he called "the fake news media and the commies in the white house"
 

Nowski

Let's Go Brandon!
A lot of places are getting hit by both email attacks, and RDP sessions left poorly secured in the last week.


I am using Linux Remmina RDP client, connecting through secure shell,
over to my Windblows 8.1 media edition tablet.

Using secure shell for all remote connections. It is easy to set up, and I simply
do not understand why, at least it isn't used on every remote, especially businesses
that use RDP or Citrix, to connect to network servers. I was a Citrix admin too,
when I was working.

It is royally messed up out there now. Glad to be retired.

Please be safe everyone.

Regards to all.

Nowski
 

Countrymouse

Country exile in the city
Well, it makes sense.

After all, they have just about used COVID up--and their "vaccine cure-all" is being accepted by enough guinea-pi-I-mean-people that they HAVE to start saying, "Oh, look, it's working (drat it!) so.....I guess we can start letting the prisoners out of their cages again---a little bit...."---

So now they have to come up with a NEW way to keep everyone HOME and unable to go to work---because they haven't QUITE killed the economy...........yet....................
 

Walrus

Veteran Member
Hmm. Russian hire to hack group. I wonder who hired them. Maybe the Russians are more involved than I originally thought. Looks like I stand corrected.
One thing these people are good at is covering their tracks. Methinks our "intelligence" agencies look just deeply enough to find the answer that their political masters want and that's good enough. We've got networking experts here; I'd like to know if a couple of days over the weekend is really enough to ferret out the real truth. Investigations usually take much longer to fully understand what happened. Really all we've heard so far is that there was a big snatch and grab and they beat feet.

Seriously?
 

EastWest

Senior Member
I know the FBI said it was a Criminal Group in Russia but I am thinking they might be full of it.

No, I know they are full of it. They are a criminal organization HERE...for all I know they did it. **** the FBI
The FBI says Russia Russia Russia, I say Alpha Alpha Alpha as in the dirty agencies trying to distract from Maricopa County where the rubber is hitting the road.
 

Repairman-Jack

Veteran Member
I am using Linux Remmina RDP client, connecting through secure shell,
over to my Windblows 8.1 media edition tablet.

Using secure shell for all remote connections. It is easy to set up, and I simply
do not understand why, at least it isn't used on every remote, especially businesses
that use RDP or Citrix, to connect to network servers. I was a Citrix admin too,
when I was working.

It is royally messed up out there now. Glad to be retired.

Please be safe everyone.

Regards to all.

Nowski
RDP out of the box uses an encrypted channel, earlier versions had a vulnerability that MS released a patch...sadly many didn't install the patch.

While I'm not familiar with remmina, if it is just client connecting to the MS rdp "server" on your Windows 8 pc...it is still vulnerable unless patched.
 

jward

passin' thru
Yes, the stories have sought to implicate Russian hacker groups from the get go-
though we see just last month the big Tech overlords made requests for policy
changes re: ransomware, and now, lo- and behold this pops up and they'll get
their wishes granted
Propaganda n Programming arms of the truth Ministry hard at work programming public opinion
..as usual : (
 
Top