Google Search

Showing posts with label agency. Show all posts
Showing posts with label agency. Show all posts

Thursday, January 10, 2013

Malware found sucking up data on new Japanese space agency rocket

Over 170,000 people are part of the Sophos community on Facebook. Why not join us on Facebook to find out about the latest security threats.

Hi fellow Twitter user! Follow our team of security experts on Twitter for the latest news about internet security threats.

Already using Google+? Find us on Google+ for the latest security news.

Rocket, courtesy of ShutterstockJapan’s space agency said on Friday that it found a computer virus on one of its desktop computers that was stealing data on one of its newest rockets and beaming it to controllers outside the agency, the New York Times reported.

The Japan Aerospace Exploration Agency (JAXA) said in a statement that the virus was found in a computer at its Tsukuba Space Center, northeast of Tokyo.

JAXA said anti-virus software detected the bug on November 21st, after which it conducted an emergency sweep for viruses that showed no other infected computers at the center.

The agency isn't sure whether the virus constitutes a cyberattack. But as the New York Times notes, Japanese defense companies have recently been targeted by similar data-siphoning Trojans, some traced to China.

Thieves this time around made off with data about the Epsilon, a solid-fuel rocket with artificial intelligence that Japan plans to send on its virgin flight in 2013.

The artificial intelligence will allow it to be remotely controlled by desktop computer.

This recent infection is the latest in a string of data pilfering targeting JAXA.

In January, the agency discovered a Trojan on an employee's computer that may have slurped login credentials for a cargo shuttle that carries food and equipment to the International Space Station (ISS).

Before the January incident, back in August 2011, JAXA found malware that after an employee opened an infected email attachment. JAXA immediately snatched the computer offline and scrubbed it clean - or, at least, that's what the agency thought.

JAXABut the computer stayed quirky, with JAXA describing it as "unstable" and prone to displaying "abnormalities".

JAXA engineers discovered the second virus on January 6th. This one was grabbing information and beaming it out to controllers between July 6th and August 11th.

JAXA said at the time that it immediately changed passwords and began checking other terminals, bolting down information security and working to ensure the leak would never recur.

It's unknown whether the current data leak came from these initial two viruses.

One thing we do know: JAXA is far from the only space agency-related target.

In November 2011, a Romanian man was arrested for hacking into NASA servers starting December 2010.

Earlier still, in 2008 a worm made it to the International Space Station, carried on a memory stick by an astronaut.

It's odd to think about rocket scientists muffing up the most elemental of security precautions, but there you have it: an employee clicks on an infected attachment, an astronaut plugs in a memory stick infected with creepy-crawlies, and then too, only last month an unencrypted NASA laptop was stolen when thieves broke into a car.

Full disk encryption, not clicking on unexpected email attachments, and scanning portable USB drives can go a long way toward avoiding data loss.

It's not rocket science, but then again, after all, rocket scientists are just human.

Follow @LisaVaas
Follow @NakedSecurity

Rocket image courtesy of Shutterstock

Tags: breach, epsilon, Full Disk Encryption, Hacker, hacking, Hacks, International Space Station, ISS, Japan, JAXA, Malware, NASA, space station, Trojan, Virus


View the original article here

Friday, June 24, 2011

Hackers target British anti-crime agency website

WASHINGTON (AFP) – Hackers who have hit the websites of the CIA, US Senate, Sony and others during a month-long rampage claimed on Monday to have knocked the site of Britain's Serious Organized Crime Agency (SOCA) offline.

"Tango down - soca.gov.uk - in the name of #AntiSec," the hacker group known as Lulz Security said in a message on their Twitter feed @lulzsec.

"Tango down" refers to the elimination of an enemy while "AntiSec" refers to "Operation Anti-Security," a campaign launched by Lulz Security against government websites.

Computer security firm Sophos said the SOCA website was sporadically inaccessible on Monday following the Lulz Security attack.

Sophos said it appeared to be a distributed denial of service attack in which a website is overwhelmed with traffic and becomes sluggish or unresponsive.

Lulz knocked the CIA's public website, cia.gov, out of commission for about two hours last week using a DDoS attack and also hacked into the US Senate's public website.

The group has also released tens of thousands of user names and passwords stolen from Sony and other sites.


View the original article here