The danger to critical infrastructure posed by malware has once again been highlighted after a computer worm was discovered in a device connected to the control system of a South Korean nuclear power plant.
The discovery comes just days after a German steelworks suffered “massive damage” after a cyber attack on its computer network.
Korea Hydro & Nuclear Power Co Ltd is the operator of nuclear power plants in South Korea. According to Reuters, it found and then removed a low-risk computer ‘worm’ on a device connected to some nuclear plant control systems. However, it insisted that no harmful virus were found in the reactor controls itself.
In response the firm said it would bolster cyber security by hiring more IT security experts and forming an oversight committee.
The discovery comes after the company admitted that its headquarters computer system had been hacked earlier in December, and that data had been stolen from its systems. A hacker reportedly used Twitter to threaten to close three reactors, and the company then carried out a full audit of its systems, which revealed the low-risk worm in a device connected to the control tower.
But authorities were quick to reassure that the worm did not reach the actual control systems of the nuclear power plant.
The control systems of the two complexes housing those reactors had not been exposed to any malignant virus, Seoul’s energy ministry and nuclear watchdog was reported to have said in a joint statement on Tuesday. It said the systems were inaccessible from external networks.
Energy Minister Yoon Sang-jick reportedly said that the worm had probably been inadvertently introduced by workers using unauthorised USB devices.
The potential risk to systems controlling critical infrastructure and industrial systems remains a worry for many governments and authorities around the world.
The dangers to infrastructure was first revealed to the world years ago when the malware known as Stuxnet, caused damage to nearly 3,000 centrifuges in the Natanz facility in Iran.
Researchers have previously warned that security weaknesses in industrial control systems could allow hackers to create cataclysmic failures in infrastructure.
For example the United States has passed legislation that would protect its electricity grid from attacks. The GRID Act would direct the FERC (Federal Energy Regulatory Commission) to take measures to protect the electricity grid from telecommunications intrusions.
Are you a security pro? Try our quiz!
AI-powered Reddit Answers allows users to access information based on Reddit posts, in move to…
Former co-developer of voice mode for OpenAI's ChatGPT launches WaveForms AI to make AI voice…
OpenAI releases Sora AI video-generation tool to ChatGPT Plus and Pro subscription users amidst concern…
Tesla to initially use human back-up controllers for company-owned robotaxi fleet at launch next year,…
Chinese government opens antitrust probe into Nvidia's $7bn acquisition of Mellanox, in move seen as…
Google Willow quantum chip makes significant improvements in error correction, moving quantum computing closer to…