Trend Micro, a global leader in cybersecurity solutions, has announced the findings of new research on the cyber-risks facing the oil and gas industry. <\/p>\n\n\n\n
The research found that the oil and gas industry and its supply chain face increased risk from advanced threat groups and others as they continue to build out digitally connected infrastructure. <\/p>\n\n\n\n
The latest in-depth report from Trend Micro draws on insights into\nalmost a decade\u2019s worth of cyberattacks against the sector, finding geopolitics\nand espionage motivate attackers targeting the oil and gas industry. While\nthese attacks are not always sophisticated, they are often targeted and impact\nproduction, which can cause real-world damage.<\/p>\n\n\n\n
\u201cIndustrial cybersecurity is not hopeless. We sometimes forget that in complex environments with appropriate security controls, the attacker is the one who has to get everything right,\u201d said Bill Malik, Vice President of Infrastructure Strategies for Trend Micro. <\/p>\n\n\n\n
\u201cIndustrial control systems (ICS) manufacturers and integrators are beginning to understand the value of a comprehensive, layered approach to information security. In tandem, information security firms like Trend Micro are expanding their integration and analytical capabilities. As the IIoT market consolidates, enterprises will have a clearer choice identifying superior, well-integrated and proven technology to protect their systems.\u201d<\/p>\n\n\n\n
As the report reveals, oil and\ngas companies typically run sprawling operations with sites in hard-to-reach\nlocations. Remote monitoring for performance, quality control and safety is\ntherefore essential, but with bandwidth limitations and the focus on\navailability, communications are often left unencrypted. <\/p>\n\n\n\n
The focus on data availability\nmakes financially motivated ransomware attacks a critical risk for the\nindustry. Carefully planned and well-executed ransomware attacks can cost millions\nof dollars in damages and down time. Known cases of ransomware infecting oil\nand gas companies were designed to create the most havoc, which results in a\nhigher likelihood of the perpetrators being paid. <\/p>\n\n\n\n
Additionally, oil and gas companies have increasingly come under the scrutiny of advanced threat groups, like APT33, which usually attack military and defence organisations with geopolitical agendas. The sector is also at risk from attacks designed to steal sensitive information and financially motivated ransomware. <\/p>\n\n\n\n
In the report, Trend Micro\nResearch details a wealth of tools and techniques readily available for\nattackers in cybercriminal underground forums, including DNS hijacking,\nphishing of VPN and webmail services, zero-day exploits, webshells, mobile\nmalware and more.<\/p>\n\n\n\n
Trend Micro recommends a range\nof defensive strategies to mitigate the cyber threats facing oil and gas firms,\nincluding:<\/p>\n\n\n\n