WAPO Pulls Fake News: The Russians Just Hacked Our Power Grid

A successful hack of our network of computers and control systems that distribute electricity nation-wide where it is needed, when it is needed could be incredibly serious. So when the Washington Post recently reported that the Russians attempted a hack of our power-grid, this was very serious talk.

The Washington Post reported Friday that the U.S. power grid had been hacked by the same Russian actors accused of breaching the DNC – the only problem, the grid wasn’t hacked.

According to the report, malicious “code” associated with Grizzly Steppe, the name given to Russian hacking operations by the Obama administration, was found within the system of a utility company in Vermont.

“While the Russians did not actively use the code to disrupt operations, according to officials who spoke on the condition of anonymity to discuss a security matter, the discovery underscores the vulnerabilities of the nation’s electrical grid,” the article states.

There’s little doubt that the nation’s electrical grid is vulnerable, and thus is one area that requires through investigation and remedial work. But there is much doubt over whether Russia attempted to disrupt it.

As the news stirred fear among Americans across social media, members of the cybersecurity community immediately questioned the validity of the report.

Matt Tait, a former member of the GCHQ, the UK’s NSA equivalent, quickly noted that attribution, or the process of discovering “whodunnit,” would almost certainly not be accomplished in less than 24 hours.

Here is Mr. Tait’s tweet:

Treat this story with a whole boatload of caution. No way a proper assessment has been done in < 1 day. https://t.co/303FDxkBko

— Pwn All The Things (@pwnallthethings) December 31, 2016

It turns out that there was a computer with malware on it in Vermont that could potentially damage the power grid, but that computer was not connected to the grid, hence there was no danger.

Soon after publication of the Post’s story, it was revealed that the malware had only infected a utility company laptop that had no access whatsoever to the electrical grid.

Alleged Russian hack of power grid was actually hack on utility company laptop with no access to the grid https://t.co/DzRavFdYBd pic.twitter.com/K1u4PEr2Dy

— Mikael Thalen (@MikaelThalen) December 31, 2016

So there was no threat at all.

That said, nations infiltrate each others’ systems on a regular basis. That doesn’t make it right, but it does dull any crisis tone that this story might have achieved.

The mistake on behalf of the Post is not to suggest that nation states do not hack into one another’s critical infrastructure. Russia has successfully infiltrated the U.S. grid before, is likely inside now, and has attacked the power grids of other countries, such as the Ukraine, in the past.

The U.S. government likewise has gained access to foreign power grids. As part of the “Nitro Zeus” operation, the U.S. breached Iranian infrastructure and prepared to carry out cyber attacks during the early years of the Obama administration in the event that diplomatic efforts to reduce Iran’s nuclear program failed.

What’s to be concluded?  First, work should continue with renewed vigor to protect our power grid from cyber-attack, regardless of the source. Second, would the left please knock off this constant drumbeat of accusations against Russia, or produce some solid evidence of the alleged offenses?

Source: Infowars