为了顺应当前形势和更好的发展,黑基网已于9月19日正式更名为【安基网】,域名更换为www.safebase.cn,请卸载旧的APP并安装新的APP,给您带来不便,敬请理解!谢谢

黑基Web安全攻防班
安基网 首页 资讯 安全报 查看内容

五大黑客组织已经瞄准工控系统

2018-3-6 07:46| 投稿: xiaotiger |来自: 互联网

摘要: 工业网络安全厂商 Dragos 公司2018年3月1日发布报告表示,目前至少有五个高水平威胁集团的恶意活动主要集中在工业控制系统(简称ICS)身上。五个黑客组织的详细介绍及比较虽然非针对性恶意软件入侵工业系统的状况并 ...

工业网络安全厂商 Dragos 公司2018年3月1日发布报告表示,目前至少有五个高水平威胁集团的恶意活动主要集中在工业控制系统(简称ICS)身上。

五个黑客组织的详细介绍及比较

虽然非针对性恶意软件入侵工业系统的状况并不罕见,但目前此类针对性攻击同样正变得愈发普遍。Dragos 公司目前正在持续追踪五个威胁组织,其皆曾经直接攻击工业控制系统或者对收集此类信息的相关信息表现出兴趣。

Electrum

该公司追踪的恶意组织之一是 Electrum,该组织最知名的“壮举”,当数2016年12月利用 CRASh OVERRIDE/Industroyer恶意软件导致乌克兰大规模停电。Electrum 与 Sandworm Team 可能存在关联,其中后者被广泛认定为造成乌克兰2015年停电事故的幕后操纵者。而俄罗斯政府则被指控为与这两轮攻击事件有关。

尽管自2016年针对乌克兰电力设施的攻击以来,Electrum 再没有发动任何大规模攻击,但 Dragos 公司表示其仍然继续保持活跃,且有证据表明其进一步扩大了打击目标范围。Dragos 公司在其报告中指出,“尽管 Electrum 以往的恶意活动主要针对乌克兰,但从其它小范围恶意事件信息以及该集团同 SANDWORM 间的关联来看,我们认为 Electrum 很可能在支持者的授意下被‘另委重任’。”

Covellite

Dragos 公司关注的另一个恶意组织为 Covellite ,其与朝鲜旗下恶名昭著的 Lazarus 集团有关。Dragos 公司的研究人员们自2017的9月起开始观察 Covellite,当时其正针对美国各电网公司发动具有高度针对性的网络钓鱼攻击。研究人员们随后发现,该集团亦可能对欧洲、北美以及东亚地区的多个组织机构发动了攻击。

与 Electrum 不同,Covellite 截至目前仍未使用过任何专门针对工业系统的恶意软件。

Dymalloy

Dragos 公司的报告还总结了 Dymalloy 集团的活动。Dymalloy 集团在对 Dragonfly 行动的调查中渐渐浮出水面,亦被称为Crouching Yeti 以及 Energetic Bear。所谓 Dragonfly 行动,很可能是俄罗斯在境外利用高复杂度恶意软件 Havex 实施的一系列攻击举措——近期,美国已经有多家能源厂商发现其控制系统遭遇 Dragonfly 行动的侵扰。

Dragos公司认为,Dymalloy 与 Dragonfly 并无关联(至少没有直接关联),因为前者使用的工具并不像 Havex 那样先进。然而,Dymalloy 黑客们确实设法入侵了位于土耳其、欧洲以及北美的多家工业控制系统厂商,并获得了对 HMI (即人机接口)设备的访问权限。Dymalloy 自2017年以来在活跃度方面似乎有所降低,这可能是为了回避媒体以及安全研究人员对其给予的高度关注。

Chrysene

自2017年年中以来,Dragos公司还一直在持续追踪Chrysene集团。该集团的主要业务集中在北美、西欧、以色列以及伊拉克,且特别关注电力、石油与天然气等行业机构。

Chrysene 目前继续保持活跃,且曾经使用伊朗网络间谍团体 OilRig 与 Greenbug 相关恶意框架的一种变种。

Dragos 公司指出,“尽管 Chrysene 的恶意软件与其它威胁组织所使用的类似工具相比,在功能性方面得到了显著增强,但我们尚未观察到该恶意集团使用其中专门针对工业控制系统的功能。而且其截至目前的所有活动似乎都集中在对工业控制系统相关组织实施 IT 渗透与间谍活动身上。”

值得注意的是,最近发现的一种被称为 Trisis/Triton的恶意软件属于专门用于破坏安全仪表系统(简称SIS)的首种威胁工具,且部分研究人员认为其与伊朗方面存在关联。

Magnallium

引发Dragos公司关注的最后一个以工业控制系统为主要目标的威胁组织为Magnallium,其同样与伊朗有所联系。自 FireEye 公司以APT33 为代码对其恶意活动发布报告后,Dragos 方面就开始追踪这一恶意集团。

尽管部分媒体在报道中认为 APT33 的主要打击目标集中在工业控制系统以及关键基础设施层面,但 Dragos 公司的调查结果显示,该组织似乎并不具备任何针对工业控制系统的攻击能力。

Dragos 公司表示,尽管这些恶意集团当中,只有一个能够通过专门针对工业控制系统的恶意软件影响其网络运营,但全部五个集团都至少参与到与工业控制系统环境相关的侦察与情报收集活动当中。这些集团在2017年中的整体活动中相对保持稳定,可能是一些已经发生的安全事件尚未被察觉。

E安全注:本文系E安全独家编译报道,转载请联系授权,并保留出处与链接,不得删减内容

, groupId: 6529465848921326087, itemId: 6529465848921326087, type: 1, subInfo: { isOriginal: true, source: E安全, time: 2018-03-05 22:22:16 }, tagInfo: { tags: [{"name":"网络安全"},{"name":"黑客"},{"name":"软件"},{"name":"欧洲"},{"name":"美国"}], groupId: 6529465848921326087, itemId: 6529465848921326087, repin: 0, }, has_extern_link: 1 }, commentInfo: { groupId: 6529465848921326087, itemId: 6529465848921326087, comments_count: 1, ban_comment: 0 }, mediaInfo: { uid: 5499921668, name: E安全, avatar: //p2.pstatp.com/large/8105/444289872, openUrl: /c/user/5499921668/, follow: false }, pgcInfo: {"media_info":{"open_url":"/c/user/5499921668/","avatar_url":"https://p2.pstatp.com/large/8105/444289872","media_id":5498191508,"name":"E安全","user_verified":false},"articles":[{"item_id":"6529466028718555661","url":"/item/6529466028718555661","title":"谷歌最近在搞什么大事?"},{"item_id":"6529465848921326087","url":"/item/6529465848921326087","title":"五大黑客组织已经瞄准工控系统"},{"item_id":"6529465669384143367","url":"/item/6529465669384143367","title":"揭秘北约“2018十字剑”网络演习的独特之处"},{"item_id":"6529465370816807427","url":"/item/6529465370816807427","title":"�6�7全球Amazon S3公开存储桶中有2%未受写入保护"}]}, feedInfo: { url: /api/pc/feed/, category: __all__, initList: [{"comments_count":6,"media_avatar_url":"//p3.pstatp.com/large/4d000428bcce87b50b","is_feed_ad":false,"is_diversion_page":false,"title":"女宝宝为什么总有夹腿行为?可别再傻傻忽视了","single_mode":true,"gallary_image_count":5,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529437717837644292/","source":"芸芸育儿经","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":1,"image_url":"//p3.pstatp.com/list/190x124/6c2e00022d0ed6dcf29f","group_id":"6529437717837644292","is_related":true,"media_url":"/c/user/5950424652/"},{"comments_count":3,"media_avatar_url":"//p3.pstatp.com/large/568700023be2c61ce84d","is_feed_ad":false,"is_diversion_page":false,"title":"法国军舰上的“男女共用浴室”,他们的日常生活几乎没有丑闻","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529277907964002829/","source":"每天焦点","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":77,"image_url":"//p3.pstatp.com/list/190x124/66c5000617a5ee12bc77","group_id":"6529277907964002829","is_related":true,"media_url":"/c/user/77550832535/"},{"comments_count":47,"media_avatar_url":"//p1.pstatp.com/large/ef700179dc8483ce09c","is_feed_ad":false,"is_diversion_page":false,"title":"黑客武库升级DDoS电磁炮 威力已不止瘫痪美国半张互联网","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6528289326009156099/","source":"爱活网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/65bc000e0a6a0cee8683","group_id":"6528289326009156099","is_related":true,"media_url":"/c/user/3349501823/"},{"comments_count":63,"media_avatar_url":"//p2.pstatp.com/large/5d49001372c941b5ff83","is_feed_ad":false,"is_diversion_page":false,"title":"中国掌控印度第二大水源:印学生造神奇机器!印度:我们自己造水","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6516458258083873294/","source":"铜仁方哥","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":25,"image_url":"//p1.pstatp.com/list/190x124/5e6f0003c55fcc137531","group_id":"6516458258083873294","is_related":true,"media_url":"/c/user/72694539357/"},{"comments_count":2,"media_avatar_url":"//p3.pstatp.com/large/97d001bf3f3cba72913","is_feed_ad":false,"is_diversion_page":false,"title":"从搭伙生活到低龄同居 心理学者吁留学生保持谨慎","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6529376124437266947/","source":"中国新闻网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":3,"image_url":"//p3.pstatp.com/list/190x124/65c3000362a4d08c3b3e","group_id":"6529376124437266947","is_related":true,"media_url":"/c/user/5757091251/"},{"comments_count":5,"media_avatar_url":"//p9.pstatp.com/large/39fd00008f4757fe8cc1","is_feed_ad":false,"is_diversion_page":true,"title":"竟然给媒体讲段子?特朗普:没人比我更擅长自黑式幽默","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529429229279379972/","source":"上观新闻","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":18,"image_url":"//p3.pstatp.com/list/190x124/65c1000d9049ed4d01a5","group_id":"6529429229279379972","is_related":true,"media_url":"/c/user/3721866747/"},{"comments_count":20,"media_avatar_url":"//p3.pstatp.com/large/435d0000dd67b19b4a70","is_feed_ad":false,"is_diversion_page":false,"title":"太空垃圾到底有多少?科学家:到2100年,人类别想飞出地球!","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6511825980900770307/","source":"趣聊吧","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":7,"image_url":"//p1.pstatp.com/list/190x124/593b0004bb19aad52e59","group_id":"6511825980900770307","is_related":true,"media_url":"/c/user/6973015260/"},{"comments_count":43,"media_avatar_url":"//p2.pstatp.com/large/6722/8366527517","is_feed_ad":false,"is_diversion_page":false,"title":"神鬼莫测的球状闪电,都有哪些解释?第三个最玄乎","single_mode":true,"gallary_image_count":11,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6504417224621556238/","source":"中国科普博览","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/53e500050fe507a5d312","group_id":"6504417224621556238","is_related":true,"media_url":"/c/user/5002054425/"},{"comments_count":5,"media_avatar_url":"//p2.pstatp.com/large/6702/7513505561","is_feed_ad":false,"is_diversion_page":false,"title":"特朗普祭出钢铁铝最严厉惩罚税影响超乎预期","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529456597238809096/","source":"余丰慧","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":4,"image_url":"//p3.pstatp.com/list/190x124/6c2f00024920f198243e","group_id":"6529456597238809096","is_related":true,"media_url":"/c/user/5123053713/"},{"comments_count":9,"media_avatar_url":"//p3.pstatp.com/large/59460000c3ad0d88f108","is_feed_ad":false,"is_diversion_page":false,"title":"低学历和高学历到底谁更能赚钱?读书到底有用吗?","single_mode":true,"gallary_image_count":3,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515571732865090061/","source":"时势造Y英雄教育","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/5b560003ae334e3d5b53","group_id":"6515571732865090061","is_related":true,"media_url":"/c/user/73971240266/"},{"comments_count":7,"media_avatar_url":"//p8.pstatp.com/large/1bf6000c1c5a5dc3d458","is_feed_ad":false,"is_diversion_page":false,"title":"创业公司的60后CEO,用传统行业经验给互联网思维“补课”","single_mode":true,"gallary_image_count":7,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6527622756211622403/","source":"寻找中国创客","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/66bf0000d4ad816863cd","group_id":"6527622756211622403","is_related":true,"media_url":"/c/user/5540902303/"},{"comments_count":271,"media_avatar_url":"//p5a.pstatp.com/large/434c00011776cc4c0b01","is_feed_ad":false,"is_diversion_page":false,"title":"“家长反对在人民币上写名字”怎成孩子退学的理由?","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6500377574537953806/","source":"姬鹏","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/4e710004169e21f445eb","group_id":"6500377574537953806","is_related":true,"media_url":"/c/user/3917584044/"},{"comments_count":13,"media_avatar_url":"//p10.pstatp.com/large/412000890b1c3f4bc67","is_feed_ad":false,"is_diversion_page":false,"title":"每秒三公里,射程四百公里,还没服役已落后,美军百亿美元打水漂","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6518693989938364935/","source":"高边疆武器","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":4,"image_url":"//p3.pstatp.com/list/190x124/5e840001512d089881ac","group_id":"6518693989938364935","is_related":true,"media_url":"/c/user/6373934877/"},{"comments_count":0,"media_avatar_url":"//p5a.pstatp.com/large/2c6f001dd5697a007f02","is_feed_ad":false,"is_diversion_page":false,"title":"我们为什么一定要占领人工智能的制高点?","single_mode":true,"gallary_image_count":1,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6509957720534155789/","source":"同道金融","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/56920003af423eca4b44","group_id":"6509957720534155789","is_related":true,"media_url":"/c/user/6951800836/"},{"comments_count":0,"media_avatar_url":"//p1.pstatp.com/large/97e001902e26102b6be","is_feed_ad":false,"is_diversion_page":false,"title":"光伏组串电流传感器的应用及迭代","single_mode":true,"gallary_image_count":13,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529362750185931267/","source":"河北青年报","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p3.pstatp.com/list/190x124/65c1000cbc21b92878ac","group_id":"6529362750185931267","is_related":true,"media_url":"/c/user/50043485625/"},{"comments_count":32,"media_avatar_url":"//p5a.pstatp.com/large/3643001a122cb2d71479","is_feed_ad":false,"is_diversion_page":false,"title":"现在手机soc性能相当于多少年前的PC?","single_mode":true,"gallary_image_count":17,"middle_mode":true,"has_video":false,"video_duration_str":null,"source_url":"/group/6515187792182510083/","source":"热点杂谈","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":28,"image_url":"//p3.pstatp.com/list/190x124/5b5500004ff949f5b44d","group_id":"6515187792182510083","is_related":true,"media_url":"/c/user/3898158981/"},{"comments_count":1,"media_avatar_url":"//p1.pstatp.com/large/4d001e41c59cc82a74","is_feed_ad":false,"is_diversion_page":false,"title":"孩子吃了一粒补脑药,人就“傻”了!","single_mode":true,"gallary_image_count":4,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6512727287069147652/","source":"医学界儿科频道","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/595b000b8535ecd6d563","group_id":"6512727287069147652","is_related":true,"media_url":"/c/user/6033357102/"},{"comments_count":11,"media_avatar_url":"//p3.pstatp.com/large/4d00172abcf7288cf2","is_feed_ad":false,"is_diversion_page":false,"title":"中俄精确制导武器打击精度为何没有美帝高?制造工艺带来的影响","single_mode":true,"gallary_image_count":6,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6506762291071943172/","source":"长缨讲堂","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":0,"image_url":"//p9.pstatp.com/list/190x124/53fa0004688a6dbe98d1","group_id":"6506762291071943172","is_related":true,"media_url":"/c/user/4270261748/"},{"comments_count":94,"media_avatar_url":"//p3.pstatp.com/large/d2a0015e51ed3a11c15","is_feed_ad":false,"is_diversion_page":true,"title":"华人围堵劫匪却被警察逮捕?西班牙人看不下去了","single_mode":true,"gallary_image_count":11,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6529484952650646024/","source":"观察者网","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":51,"image_url":"//p3.pstatp.com/list/190x124/65c50002c593440a4d18","group_id":"6529484952650646024","is_related":true,"media_url":"/c/user/2928392215/"},{"comments_count":102,"media_avatar_url":"//p1.pstatp.com/large/3b120000a79ccf148335","is_feed_ad":false,"is_diversion_page":false,"title":"啄木鸟每天啄木12000次,为什么不会得脑震荡?","single_mode":true,"gallary_image_count":3,"middle_mode":false,"has_video":false,"video_duration_str":null,"source_url":"/group/6521510912233308685/","source":"一古网视","more_mode":null,"article_genre":"article","has_gallery":false,"video_play_count":14,"image_url":"//p3.pstatp.com/list/190x124/616a00041c8c91b00bf7","group_id":"6521510912233308685","is_related":true,"media_url":"/c/user/64962441760/"}] }, shareInfo: { shareUrl: https://m.toutiao.com/group/6529465848921326087/, abstract: 工业网络安全厂商Dragos公司2018年3月1日发布报告表示,目前至少有五个高水平威胁集团的恶意活动主要集中在工业控制系统身上。

小编推荐:欲学习电脑技术、系统维护、网络管理、编程开发和安全攻防等高端IT技术,请 点击这里 注册黑基账号,公开课频道价值万元IT培训教程免费学,让您少走弯路、事半功倍,好工作升职加薪!



免责声明:本文由投稿者转载自互联网,版权归原作者所有,文中所述不代表本站观点,若有侵权或转载等不当之处请联系我们处理,让我们一起为维护良好的互联网秩序而努力!联系方式见网站首页右下角。


鲜花

握手

雷人

路过

鸡蛋

相关阅读

最新评论

最新

返回顶部