Employees Connect Nuclear Plant To the Internet So They Can Mine Cryptocurrency 29
Ukrainian authorities are investigating a potential security breach at a local nuclear power plant after employees connected parts of its internal network to the internet so they could mine cryptocurrency. From a report: The investigation is being led by the Ukrainian Secret Service (SBU), who is looking at the incident as a potential breach of state secrets due to the classification of nuclear power plants as critical infrastructure. Investigators are examining if attackers might have used the mining rigs as a pivot point to enter the nuclear power plant's network and retrieve information from its systems, such as data about the plant's physical defenses and protections. According to authorities, the incident took place in July at the South Ukraine Nuclear Power Plant, located near the city of Yuzhnoukrainsk, in southern Ukraine. It's unknown how the scheme was discovered, but on July 10 the SBU raided the nuclear power plant, from where it seized computers and equipment specifically built for mining cryptocurrency.
Hey.. (Score:3)
Re:Hey.. (Score:4, Funny)
"I don't know, let's ask the crypto wallet inspector. He seems like a smart guy".
"Homer, there's no crypto wallet inspector".
"D'oh!!!"
Re: (Score:2)
Re: (Score:2)
Pressure too high Tank must be shut down manually
Re: (Score:2)
"Venting prevents explosion"
Always remember where those "pig up", "pig down", and "any" keys are located. They're important!
Re: (Score:3)
Better question - why are they moving at all?
Fact is, you don't really move the control rods much during routine operations of a nuclear plant. Just during startup and shutdown, which don't happen all that often, and occasional tweaks (and by "tweaks", I mean an operator uses the control rod position control for maybe five seconds, tops) with sudden demand spikes....
Re: (Score:1)
The upgrade to an MS XP computer can watch better and correct for Chernobyl like human input commands.
miners need a lot of power! (Score:2)
miners need a lot of power!
Four words..... (Score:2)
Oh My Freakin' God.......cuff 'em and stuff 'em out to the gulag...
Re: Four words..... (Score:2)
No! Don't! Chernobyl was a great show, and I want a sequel.
Re: (Score:3)
Business networks connect to the internet
Re: (Score:2, Insightful)
Internal network versus external network. That means actual changes to hardware, rewiring and well, a fuck everyone attitude thar is monies to be made and energy to be pirated. They compromised the security of a nuclear power station, do you really understand how mind bogglingly corruptly stupid that is, seriously fucking stupid. At least they caught it, clearly they had not paid the proper bribes and were being prosecuted or forced to pay the appropriate bribes.
For the rest of the EU, that this crazy crap
Re:Four words..... (Score:5, Insightful)
Let me spell it out simply; All energy companies, like any other large company, have administrative networks they use to do business. Those networks are avaiable to people who work at nuclear facilities like any other facility. Those networks are connected to the internet. The plant control networks are completely different, separete networks.
These employee connected some mining hardware to the administrative network, not the plant network. They compromised the corporate business network, not plant operational networks. Furthermore, the admin network was, is, and will continue to be connected to the internet. That is why they used it. It would be zero difference if they had connected that equipment at the corporate headquarters.
The only 're=wiring' that was required was to plug in a new ether net patch cable to the network. Possibly, if this were corporate IT folks, they may have given credentials to that equipment to allow it to connect. Regular employees rarely have the ability to do so. Or the network wasn't properly set up to not allow such stuff to connect. Either way, its a corporate LAN vulnerability, not a plant one.
Re: (Score:2)
Gulag is now in Russia - I doubt that Moscow would be willing to cooperate w/ Kyiv on sending their felons there.
On a different note, why not just have a server farm dedicated to crypto-currency built at Chernobyl? It's not like anything else is going on there
This is not an IT security problem (Score:2)
This is wayyyy worse: It is complete incompetence in hiring and payment. I shudder to think what this incompetence would do in a real emergency.
Mining Cryptocurrency at the Nuclear Plant. (Score:2)
B) I hope the police -- Ukrainian Secret Service (SBU) -- also included someone authoritative to say, "This computer belongs here, that one doesn't", and not to just start taking evidence (computers) willy-nilly.
C) Would YOU want radioactive currency? I wouldn't.
Ukranian nuclear power (Score:5, Funny)
Re: (Score:2)
Re: (Score:1)
Get free power and the math adds up.
More math and that first profit.
Put money back into the venture and buy a better DIY rig.
That train trip to the big city to get FPGA vs super powerful ASIC advice.
The knowing look for the computer shop that someone has free power.
Rods go up, rods go down, Ukranian nuclear power always free.
Comment removed (Score:5, Funny)
Much to do about nothing (Score:3)
This equipment was found in the power plant's administration offices, and not on its industrial network.
But that won't stop slashdot from posting yet another scare story about nuclear power, of course.
Re: (Score:2)
TFA doesn't sound as alarming as the title (Score:3)
I highly doubt the power company is in the habit of buying computers which can accept 5 or 6 PCIe x16 cards. More than likely these guys bought the hardware themselves, and just set up the computers at work so they wouldn't have to pay for the electricity to run them.
Connecting the internal network to the Internet is more serious, but I've seen executives from nearly every company I've been at ask for/demand exactly that. If this was the administrative network that was connected to the Internet, then the danger was an information breach, not loss of control of the power plant.
Culture (Score:2)
To be fair, as a former Eastern European, this doesn't sound farfetched. The culture of professionalism may be a bit spotty in the area, and I've seen similar things before.
Maybe the funniest one I remember happened at Romanian semiconductor foundry "Microelectronica", back before the fall of communism (caveat though: may be apocryphal).
The "Microelectronica" plant was spanking new at the time, using expensive imported production lines. It was designed to make (almost) state of the art integrated circuits,
crypto news (Score:1)