【Breaking News】America’s largest fuel pipeline transportation company targeted by cyber hackers, forced to temporarily shut down its entire network
Thread Content
Colonial Pipeline, the largest fuel pipeline operator in the United States, said that on the 7th local time, its computer systems were attacked by hackers using ransomware, forcing it to suspend operations across its entire pipeline network; some of its information management systems were also affected. Colonial Pipeline Company did not reveal the name of the organization that carried out the attack, nor did it disclose how much ransom the hackers demanded; however, it said it had hired a third-party cybersecurity firm to conduct an investigation and has informed federal ** and law enforcement agencies. The pipelines of Colonial Pipeline Company connect refineries along the Gulf Coast with the eastern and southern parts of the United States, stretching 8,850 kilometers from Houston, Texas to Linden, New Jersey. They transport 2.5 million barrels of gasoline and aircraft fuel per day, supplying 45% of the fuel needed by the east coast of the United States.
This pipeline primarily supplies fuels such as gasoline, diesel, and aviation kerosene, providing 45% of the fuel needed for the East Coast of the United States. If this pipeline remains inactive for a long time, towns and cities along the Atlantic coast will be forced to stop fishing at sea, trucks will reduce their deliveries, factories and shops will be unable to make deliveries or restock goods, people will go out less and reduce their spending, and some airplanes will have to cease flying. All land, sea, and air transportation will be affected! ? The hackers only demanded payment in “virtual currency”; it is said to be a well-known criminal gang that continuously commits crimes within the United States. Virus software is often used to invade the websites of private businesses, hospitals, and ** in order to carry out ransom demands. Last year, the United States lost hundreds of billions of dollars as a result. Computer experts say that in the case of such viruses, a regular computer system usually has to be shut down for 21 days. If the pipeline network stops operating for 21 days as a result, fuel prices in the United States will surely rise, exerting significant negative pressure on efforts to revive the U.S. economy.
According to foreign media outlets such as the BBC and Reuters, multiple sources have confirmed that this ransomware attack was carried out by a cybercrime group named “DarkSide”. This organization not only develops software and trains its employees to carry out these attacks, earning commissions from them, but it also turns ransom attacks into a business by publicizing them through press releases and inviting journalists for interviews. Regarding this attack, \"the United States has gotten involved, as has the FBI,\" which has triggered significant ripple effects in the U.S. So, was this move by the \"dark side\" a deliberate strategy on their part, or was it a mistake? “The tactics behind the “DarkSide” ransomware attack have been revealed; remote work may provide hackers with an opportunity to take advantage of such situations. According to the BBC, “DarkSide” infiltrated the network of Colonial Pipeline on May 6, using nearly 100GB of data as a bargaining tool ； After obtaining this data, they also locked down data on some computers and servers, and demanded a ransom on the 7th. “The “dark side” threat said that if the payment was not made on time, they would leak this data online. Sources say the ransom it demanded was virtual currency worth millions of dollars. It is reported that after carrying out the attack, in addition to seeing the ransom note on the computer screen, the victims also receive a message packet. “The “dark side” notifies the victim that “the computer and servers have been encrypted,” lists the types of data that were stolen, and provides a link to a “personal data exposure page.” This page has completed data loading. If the company or organization fails to make the payment by the deadline, the data on that page will be made public automatically. “The “dark side” will also inform the victim that evidence of the data it has obtained will be provided, and that it plans to delete it from the victim’s network.
After achieving a high degree of automation, its vulnerable aspects will also gradually become apparent.
"Close Twitter; it’s better to close Facebook as well, so as to prevent fake information from spreading everywhere.
That’s the issue: once an automatic system is put into use, there must be a manual backup system