Nuclear Regulatory Commission Computers Hacked

Nuclear Regulatory Commission Computers Hacked

An internal investigation has discovered that for the past three years, Nuclear Regulatory Commission (NRC) computers have been successfully hacked, twice by foreigners and once by an unidentifiable individual.Nuclear Regulatory Commission Computers Hacked

Incident #1 – Phishing emails were sent to about 215 NRC employees, baiting personnel to verify their user accounts by clicking on an embedded link and logging in. The link took victims, about 12 total, to a cloud-based Google spreadsheet.

NRC was able to track the originator of the spreadsheet to a foreign country; however, the nation was not identified publicly.

Incident #2 – Spearphishing emails were sent to NRC employees with a URL embedded into the email, connected to a cloud-based Microsoft Skydrive storage site that housed malware.

Again, NRC was able to track the sender of the emails to a foreign country that is remaining nameless at this time.

Incident #3 – The personal email account of an NRC employee was hacked and sent malware to other personnel from the employee’s contact list. There was a PDF attachment within the email that contained a JavaScript security vulnerability.

Investigators subpoenaed an Internet Service Provider for records, but apparently the provider did not have log records for the date of the incident, rendering it was impossible to identify the sender without the logs.

Because NRC oversees the U.S. nuclear power industry, it maintains records of oversea aggressors, including databases detailing the locations and condition of nuclear reactors, and relies on plants that handle weapon-grade materials to submit information detailing their inventories.

According to commission spokesman David McIntyre, NRC is always concerned about potential computer intruders, so much so, that every NRC employee must complete annual cyber training that teaches about phishing, spearphishing and other ways hackers can infiltrate agency systems.

About the Author

Ginger Hill is Group Social Media Manager.

Featured

New Products

  • Mobile Safe Shield

    Mobile Safe Shield

    SafeWood Designs, Inc., a manufacturer of patented bullet resistant products, is excited to announce the launch of the Mobile Safe Shield. The Mobile Safe Shield is a moveable bullet resistant shield that provides protection in the event of an assailant and supplies cover in the event of an active shooter. With a heavy-duty steel frame, quality castor wheels, and bullet resistant core, the Mobile Safe Shield is a perfect addition to any guard station, security desks, courthouses, police stations, schools, office spaces and more. The Mobile Safe Shield is incredibly customizable. Bullet resistant materials are available in UL 752 Levels 1 through 8 and include glass, white board, tack board, veneer, and plastic laminate. Flexibility in bullet resistant materials allows for the Mobile Safe Shield to blend more with current interior décor for a seamless design aesthetic. Optional custom paint colors are also available for the steel frame.

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.