The Last Watchdog

JUNE 9, 2025

Attackers—from nation-state actors to ransomware gangs—are growing more creative and persistent in probing utility networks and operational technology systems that underpin modern life. This comes at a moment when utility cybersecurity is at a crossroads. LW: Why do most utilities still stick with the status quo?

Risk 113

Risk Energy and Utilities Data collection Cybersecurity 113

SecureList

NOVEMBER 29, 2024

CloudSorcerer is a sophisticated cyber-espionage tool used for stealth monitoring, data collection and exfiltration via Microsoft, Yandex and Dropbox cloud infrastructures. The malware utilizes cloud resources for its C2 (command and control) servers, which it accesses via APIs using authentication tokens.

Energy and Utilities 104

Energy and Utilities Ransomware Malware Government 104

SecureWorld News

AUGUST 23, 2024

The incident has raised concerns within the energy sector, as Halliburton plays a crucial role in global oilfield operations, and any disruption to its networks could have far-reaching implications. The potential cyberattack on Halliburton underscores the growing threat to critical infrastructure and companies within the energy sector.

Cyber Attacks 123

Cyber Attacks Energy and Utilities Risk Technology 123

SecureList

MARCH 13, 2025

Additionally, Head Mare attacks utilized command-and-control (C2) servers exclusively linked to Twelve prior to these incidents. Anti-detection techniques Head Mare continued to use the Masquerading technique (T1655), naming utility executables like standard operating system files.

Energy and Utilities 78

Energy and Utilities Software Accountability Phishing 78

CyberSecurity Insiders

SEPTEMBER 21, 2021

Beyond traditional IT operations that utilize servers, routers, PCs and switches, these organizations also rely on OT, such as programmable logic controllers (PLCs), distributed control systems (DCSs) and human machine interfaces (HMIs) to run their physical plants and factories. whether done through the network or locally. Conclusion.

Energy and Utilities 101

Energy and Utilities Manufacturing Threat Detection Technology 101

Thales Cloud Protection & Licensing

MAY 13, 2021

Operating the country’s largest refined products pipeline, Colonial Pipeline was brought to its knees over the weekend by a ransomware attack by cybercriminal gang, DarkSide. Data Manipulation. Many breaches are all about data collection, which appears to be what happened in the case of Colonial Pipeline.

Energy and Utilities 77

Energy and Utilities Encryption Data collection Ransomware 77

SecureList

NOVEMBER 14, 2023

The rise of destructive attacks In December of last year, shortly after we released our predictions for 2023, Russian government agencies were reported to have been targeted by a data wiper called CryWiper. The malware posed as ransomware, demanding money from the victims for “decrypting” their data.

Hacking 141

Hacking Energy and Utilities Malware Media 141