NASA Hack Blamed On Rogue Raspberry Pi

A hack at NASA’s Jet Propulsion Laboratory (JPL) has been blamed on an unsecure and unauthorised Raspberry Pi device.

In a report, the NASA’s Office of Inspector General, noted a previous security breach in 2011 at JPL that resulted in the theft of 87GB of data.

But in April 2018 “JPL discovered an account belonging to an external user had been compromised and used to steal approximately 500 megabytes of data from one of its major mission systems.”

Rogue device

An investigation apparently revealed “multiple IT security control weaknesses” that reduced “JPL’s ability to prevent, detect, and mitigate attacks targeting its systems and networks, thereby exposing NASA systems and data to exploitation by cyber criminals.”

Among a number of security flaws at JPL, including inadequate security controls, and a lack of admin visibility into network access, the investigators found that an unauthorised micro computer allowed hackers to gain access to steal the mission data.

“The April 2018 cyberattack exploited this particular weakness when the hacker accessed the JPL network by targeting a Raspberry Pi computer that was not authorised to be attached to the JPL network,” the report stated.

The highly detailed report did not reveal how the Raspberry Pi computer came to be attached to the JPL network, or indeed which staffer or contractor was responsible.

JPL was founded back in the 1930s and is owned by NASA and managed by the nearby California Institute of Technology (Caltech) for NASA.

Its goal is the construction and operation of spacecraft to explore other planets. It is also responsible for operating NASA’s Deep Space Network.

Micro computers

The first Raspberry Pi single-board computer was launched all way back in February 2012 for the price of just £22, and it triggered a revolution in how small and cheap computers could be.

Since that time various new models have arrived, and included additions such as Wi-Fi and Bluetooth in a bid to make the device a suitable “hub” for the Internet of Things (IoT).

Microsoft has released a brace of Raspberry Pi 3-powered IoT kits, and a partnership with Google has opened the doors to the introduction of artificial intelligence.

The company has also continued to strengthening its ties to the education sector with the launch of a magazine for teachers called ‘Hello World’.

Quiz: What do you know about the Raspberry Pi?

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

Recent Posts

Government ‘Planning Removal’ Of Huawei 5G Equipment

Government said to be considering dramatic reversal of earlier 5G plans on new security advice…

2 days ago

EU Signals Broader Probe Into Google’s Fitbit Buy

European Commission sounds out Google and Fitbit competitors about competitiona and privacy concerns as regulators…

2 days ago

Apple Reconfigures Macs To Block Adware

Apple will no longer allow user profiles to be installed on Macs without user interaction,…

2 days ago

F5 Networks Warns Of Critical Security Flaw In Networking Devices

F5 says BIG-IP application delivery controllers used on many corporate and government networks are vulnerable…

2 days ago

Iran Says Nuclear Facility Fire May Have Been Cyber-Sabotage

A fire at Natanz uranium-enrichment facility may have been a cyber-attack Iranian officials say, recalling…

2 days ago

Thanos Ransomware Adds New Features

Rapid evolution of Thanos ransomware-as-a-service, along with high-end attacks, indicate evolving threat as criminals seek…

2 days ago