sb-au logo
Story image

ESET to take on Industroyer malware & 'post-truth plague' at Black Hat

13 Jul 2017

ESET is set to reveal the underside of the notorious Industroyer malware and the “post-truth plague” that muddies the waters of cybersecurity advice at the upcoming Black Hat information security conference in Las Vegas later this month.

The global security firm originally discovered Win32/Industroyer, a powerful malware that targets industrial control systems such as switches and circuit breakers.

The Industroyer malware is probably behind the December 2016 power outages in Ukraine, but so far this has not been confirmed by ESET researchers, but already this particular malware is much more powerful.

Researchers speculate that unlike the BlackEnergy and Killdisk malware that hit Ukraine in 2015, the Industroyer malware is much more advanced as it directly targeted switches and circuit breakers.

Anton Cherepanov, ESET senior malware researcher, says that the malware creators display highly specialised knowledge and could not have been made by amateurs.

“These switches and circuit breakers are digital equivalents of analogue switches; technically they can be engineered to perform various functions. Thus, the potential impact may range from simply turning off power distribution, to cascading failures and more serious damage to equipment,” he states in a blog post.

In a further research report, he says that, “It seems very unlikely anyone could write and test such malware without access to the specialized equipment used in the specific, targeted industrial environment”.

Cherepanov’s talk at Black Hat will also feature fellow ESET senior malware researcher Robert Lipovsky, Dragos senior threat analyst Joe Slowik, Dragos threat operations center director Ben Miller and Dragos CEO Robert Lee.

ESET will also host a session on evaluating ‘bold claims’ from security vendors that are a little too eager to capitalise on the burgeoning cybersecurity industry as it explodes.

With widely-publicised attacks such as WannaCry, NotPetya and nation-state hacking dominating the threat space, ESET says businesses and consumers need to know how to take action to protect themselves.

That may be easier said than done, with myths and marketing surrounding cybersecurity products at every turn.

“Is it really possible to defend networks with 'machine learning' and 'artificial intelligence' alone? Why can't we always stop new threats? Is there still honesty in the cyber-security industry,” the company puts forth.

At the Black Hat event, ESET CTO Juraj Malcho will talk about what he calls the ‘post-truth plague’ that confuses businesses and consumers alike, and ultimately how it does more harm than good.

Story image
Why it’s essential to re-write IT security for the cloud era
Key components of network security architecture for the cloud era should be built from the ground up, as opposed to being bolted on to legacy solutions built for organisations functioning only on-premises or from only managed devices.More
Story image
Ripple20 threat has potential for 'vast exploitation', ExtraHop researchers find
One in three IT environments are vulnerable to a cyber threat known as Ripple20. This is according to a new report from ExtraHop, a cloud-native network detection and response solutions provider. More
Story image
Gartner: By 2023, 65% of the world will have personal data covered under modern privacy regulations
“Security and risk management (SRM) leaders need to help their organisation adapt their personal data handling practices without exposing the business to loss."More
Story image
Proofpoint and CyberArk extend partnership to further safeguard high-risk users
“Our CyberArk partnership extension provides security teams with increased detection and enhanced adaptive controls to help prevent today’s most severe threats."More
Story image
SMBs seeking service providers in face of rising cyber threats
SMBs are struggling with their cybersecurity solutions, with three quarters worried about being the target of a cyberattack in the next six months, and 91% considering using or switching to a new IT service provider if offered a better option.More
Story image
Cohesity announces integrated, automated disaster recovery
The new solution is integrated with the company’s existing backup and continuous data protection capabilities.More