Telangana State Southern Power Distribution Company Ltd (TSSPDCL)
May 1, 2019
•[ hack, energy ]
The websites of Telangana State Southern Power Distribution Company Ltd (TSSPDCL) and its AP counterpart were hacked a couple of days ago, disrupting web services, including online payments.
Bangladesh Oil, Gas and Mineral Corporation (Petrobangla)
April 8, 2019
•[ hack, energy ]
The official website of the Bangladesh Oil, Gas and Mineral Corporation (Petrobangla) is defaced twice in the space of few hours.
Fort Collins Loveland Water District
March 14, 2019
•[ ransomware, malware, energy ]
Fort Collins Loveland Water District and South Fort Collins Sanitation District are the victim of a ransomware attack occurred on February 11.
Vale
January 29, 2019
•[ leak, energy ]
The Brazilian multinational mining company Vale is hacked and confidential internal documents are leaked (about 40 thousand files in a 500 MB folder).
Italian organization operating in the Oil&Gas sector
January 11, 2019
•[ hack, malware, energy ]
Researchers from Cybaze-Yoroi ZLab reveal a campaign against an undisclosed Italian organization in the Oil and Gas sector, exploiting CVE-2017-11882 to distribute the AVE_MARIA malware.
Tecnimont SpA
January 11, 2019
•[ financial, phishing, energy ]
The Indian subsidiary of Tecnimont SpA falls prey to a fraud wherein $18.6 million (INR 130 crore) were being stolen by a group of Chinese hackers pretending to be trading an acquisition in China.
SAIPEM
December 20, 2018
•[ hack, malware, energy ]
An attack on the Italian oil firm Saipem targeted servers based in India, Kuwait, Saudi Arabia, Scotland, and the United Arab Emirates. Hackers used a variant of the Shamoon virus.
SAIPEM
December 10, 2018
•[ hack, malware, energy ]
Italian oil services company SAIPEM is hit by a new version of the Shamoon malware. The attack started in India and hit the servers in Saudi Arabia, the United Arab Emirates and Kuwait. Fingers are pointed to Iran.
RWE
September 25, 2018
•[ hack, ddos, energy ]
Unknown attackers launch a large-scale DDoS attack that takes down RWE's website.
Chlorine distillation plant in Ukraine
July 11, 2018
•[ hack, malware, energy ]
The Ukrainian Secret Service (SBU) reveals it stopped a cyber-attack with the VPNFilter malware on a chlorine distillation plant in the village of Aulska, in the Dnipropetrovsk region. The SBU accuses Russia of operating the malware and launching the attack.
Z Energy Ltd
June 27, 2018
•[ hack, energy ]
New Zealand-based fuel supplier Z Energy Ltd says it has been presented with evidence that customer data from its Z Card Online database was accessed by a third party in November 2017.
Uttar Haryana Bijli Vitran Nigam Limited (UHBVNL)
March 21, 2018
•[ ransomware, malware, energy ]
Uttar Haryana Bijli Vitran Nigam Limited (UHBVNL), a power distribution company suffers a cyber attack on its Automatic Meter Reading System (AMR) in which billing data of about 4,000 industrial consumers are encrypted. The attackers demand a ransomware extortion payment.
Puerto Rico's Power Utility, PREPA
March 19, 2018
•[ hack, energy ]
Puerto Rico's Power Utility, PREPA reveals to have been hacked over the weekend, but customer information was not compromised.
Unnamed petrochemical company in Saudi Arabia
March 15, 2018
•[ hack, energy ]
The New York Times reveals that back in August, a petrochemical company with a plant in Saudi Arabia was hit by a cyberattack aimed to sabotage the firm's operations and trigger an explosion.
Undisclosed water utility company
February 8, 2018
•[ financial, malware, energy ]
Researchers from Radiflow discover the first example of a malware attacking the operational network of a water utility company in order to mine the Monero cryptocurrency,
Electronic Gas Stations
January 19, 2018
•[ financial, malware, energy ]
Russian authorities identify a distributed malware campaign targeting electronic gas stations using software programs at the pumps. Dozens of gas stations have been attacked with customers paying more for fuel (around 3 to 7% increment per gallon).
Sinopec's Shengli Oilfield
August 21, 2017
•[ ransomware, malware, energy ]
Sinopec's Shengli Oilfield says it will cut its Internet connection for some of its offices after a ransomware attacked 21 of its Internet terminals.
Ireland's Electricity Supply Board
July 15, 2017
•[ espionage, phishing, energy ]
The Times reveals that hackers backed by the Russian government have targeted the Republic of Ireland's energy sector, and aimed to infiltrate control systems. This would have given them the power to knock out parts of the grid in Northern Ireland. The attackers sent phishing emails to senior engineers at Ireland's Electricity Supply Board.
Wolf Creek Nuclear Operating Corporation
June 30, 2017
•[ hack, phishing, energy ]
A threat actor targeted employees of companies that operate nuclear power plants in the United States, which prompted the Department of Homeland Security and the FBI to issue an alert to the industry. An administrative network of the Wolf Creek Nuclear Operating Corporation was compromised.
West Bengal State Electricity Distribution Company
May 12, 2017
•[ ransomware, malware, energy ]
A threat actor used a tool called WannaCry to encrypt data in compromised networks, and intended to provide the victims with the decryption key only after a ransom had been paid. The threat actors used an exploit, called EternalBlue--first discovered by the U.S. National Security Agency--to propagate WannaCry in organizations using the Windows operating system.
