26% of control systems users were fooled by bogus emails sent to them

World news :: Controls operators are duped by bogus emails

drives.co.uk 22 Jan '13, 11am

26% of control systems users were fooled by bogus emails sent to them

In the experiment, Tyler Klinger, a security researcher with Critical Intelligence and Scott Greaux of PhishMe , sent spear-phishing emails to more than 70 employees working on industrial controls and other critical systems at two companies involved with power plants and pipeline maintenance (with the companies’ agreement). They found the employees’ email details using the Jigsaw service that provides crowd-sourced contact information for sales teams, and confirmed the addresses via company and industry Web sites and LinkedIn, which also revealed their contacts. Using this information, they sent emails to the targeted individuals that appeared to come from colleagues and contacts, and seemed to offer job opportunities or software training. The addressees were invited to click on a link for more details. One email focused on a Rockwell Automation product that the target was...

Full article: http://www.drives.co.uk/fullstory.asp?id=3728

Tweets

@PhishMe » 22 Jan '13, 8pm
"Companies should also work on the spear-phishing aspects of their security awareness programme." -->[link] #infosec
@PhishMe » 22 Jan '13, 6pm
"If the spear-phishing victims’ browsers were missing security patches, their computers could be compromised" --> [link]
@PatrickCMiller » 22 Jan '13, 5pm
Controls operators are duped by bogus emails - Drives & Controls [link] < Good to see coverage in trade pubs
@AnonNashville » 22 Jan '13, 3pm
RT @Asher_Wolf - 26% of control systems users were fooled by bogus emails sent to them [link] #Anonymous #OWS #Occupy
@WarOnPrivacy » 22 Jan '13, 3pm
As usual, weak point in #SCADA security are Control Ops responding to #SpearPhishing attacks [link] credit: @Asher_Wolf
@PLatchman » 22 Jan '13, 3pm
RT @Asher_Wolf: 26% of control systems users were fooled by bogus emails sent to them [link]
@Asher_Wolf » 22 Jan '13, 3pm
26% of control systems users were fooled by bogus emails sent to them [link]
@Joey_Hernandez » 22 Jan '13, 2pm
Controls operators are duped by bogus emails - Drives & Controls: Controls operators are duped by b... [link] #scada #risk
@SA_Cyber » 22 Jan '13, 12pm
Controls operators are duped by bogus emails - Drives & Controls: Controls operators are dupe... [link] #cyber #sanantonio
@DrivesnControls » 22 Jan '13, 11am
Controls operators are duped by bogus emails [link]
@CIApressoffice » 22 Jan '13, 3pm
RT @Asher_Wolf: 26% of control systems users were fooled by bogus emails sent to them [link]
@Eye_Bleed_Ink » 22 Jan '13, 3pm
RT @Asher_Wolf: 26% of control systems users were fooled by bogus emails sent to them [link]

How to use Sidekiq's built-in extensions to sen...

rubyflow.com 22 Jan '13, 5pm

How to use Sidekiq's built-in extensions to send emails asynchronously Posted by kfaustino on January 22, 2013 — 0 comment...