Today’s podcast is timely for a number of reasons. First, the theme for the final week of National Cyber Security Awareness Week (NCSAM), which concludes today, is “Protecting Critical Infrastructure From Cyber Threats.”

Second, and even more importantly, no other industry is at greater risk of a truly debilitating cyberattack than the energy and utilities (E&U) sector. According to a recent advisory from US-CERT, “since at least May 2017, threat actors have targeted government entities and the energy, water, aviation, nuclear and critical manufacturing sectors.”

Listen now as Nick Bradley and Michelle Alavarez, both of the X-Force Threat Research team, examine what makes the E&U industry such an attractive target for attackers. Questions examined in their wide-ranging conversation include:

  • Does compliance with national and regional regulations equate to security?
  • What are the most notable areas of risk for the E&U sector?
  • Attacks on industrial control systems (ICS) increased by 110 percent in 2016 and are rising even more in 2017. What is behind this dramatic surge?
  • Insider threats are a risk across many sectors. Is this also true of the E&U industry?
  • What is the most prominent attack type targeting E&U systems?
  • Where should the E&U industry focus its investments and resources?


Listen to the podcast


Read the complete Report: Energy and Utility Companies — Targeted on all sides

More from Advanced Threats

Black Hat 2022 Sneak Peek: How to Build a Threat Hunting Program

You may recall my previous blog post about how our X-Force veteran threat hunter Neil Wyler (a.k.a “Grifter”) discovered nation-state attackers exfiltrating unencrypted, personally identifiable information (PII) from a company’s network, unbeknownst to the security team. The post highlighted why threat hunting should be a baseline activity in any environment. Before you can embark on a threat hunting exercise, however, it’s important to understand how to build, implement and mature a repeatable, internal threat hunting program. What are the components…

Top-Ranking Banking Trojan Ramnit Out to Steal Payment Card Data

Shopping online is an increasingly popular endeavor, and it has accelerated since the COVID-19 pandemic. Online sales during the 2021 holiday season rose nearly 9% to a record $204.5 billion. Mastercard says that shopping jumped 8.5% this year compared to 2020 and 61.4% compared to pre-pandemic levels. Cyber criminals are not missing this trend. The Ramnit Trojan, in particular, is out for a shopping spree that’s designed to take over people’s online accounts and steal their payment card data. IBM…

Detections That Can Help You Identify Ransomware

One of the benefits of being part of a global research-driven incident response firm like X-Force Incidence Response (IR) is that the team has the ability to take a step back and analyze incidents, identifying trends and commonalities that span geographies, industries and affiliations. Leveraging that access and knowledge against the ransomware threat has revealed tools, techniques and procedures that can often be detected through the default Windows event logs (WELs). In particular, the X-Force IR team has identified several…

How to Report Scam Calls and Phishing Attacks

With incidents such as the Colonial Pipeline infection and the Kaseya supply chain attack making so many headlines these days, it can be easy to forget that malicious actors are still preying on individual users. They're not using ransomware to do that so much anymore, though. Not since the rise of big game hunting, anyway. This term marks ransomware actors' shift away from attacks against individual users and towards operations targeting large enterprises, noted CNBC. But attacks like phishing and…