News / USA

    Could IS Turn Next to Cyber War?

    FILE - Hackers who say they are loyal to the Islamic State group, take over the U.S. Central Command Twitter account, Jan. 12, 2015.
    FILE - Hackers who say they are loyal to the Islamic State group, take over the U.S. Central Command Twitter account, Jan. 12, 2015.

    The power is out. Gas stations are out of gas. Factories are going haywire.

    It sounds like an action movie, but some analysts tell VOA that U.S. industries need to significantly ramp up their cyber security or risk having the Islamic State (IS) hack, attack and create mayhem inside their systems.

    "This is definitely a threat to the U.S. government and other western governments, but also to our industrial control systems — the ones that run our manufacturing plants, moving energy across the country, that have vulnerabilities," said Bob Gourley, the former chief technology officer of the Defense Intelligence Agency.

    Unlike cyberattacks by Russia and China, Gourley said, groups like IS are less interested in just extracting information and more interested in disrupting essential systems.

    "They are going to want to cause mischief and grab attention, so destroying equipment or changing information that makes us question our own systems," said Gourley, co-founder of Cognitio and publisher of ThreatBrief.com.

    FILE - A computer screen is pictured at TV5 Monde after the French television network was hacked by people claiming allegiance to the Islamic State group, in Paris, France, April 9, 2015.
    FILE - A computer screen is pictured at TV5 Monde after the French television network was hacked by people claiming allegiance to the Islamic State group, in Paris, France, April 9, 2015.

    As yet, he added, IS militants are not as capable as some criminal networks or rival nations, "but IS has more capabilities that any other terrorist organization that I know of. And they can gain more."

    Protecting government systems

    So far, IS has established itself as a leader in using Internet-based communications and social media to both send encrypted information and recruit thousands of people from more than 80 countries around the world.

    "We are in a new age of this threat," Gourley said, "and the most important thing is we need to defend our systems better than they are currently being defended."

    Clifton Triplett, recently named the Office of Personnel Management's senior cyber and information technology adviser, said he is already working to limit any kind of IS breach into the government department.

    "I think what I have to do is … assume that, at some point in time, they may be successful," Triplett said at a conference organized by Bloomberg Government. "So how do I minimize the impact of their success? Right now, that really comes into access control."

    OPM suffered a major hack earlier in 2015, resulting in the disclosure of private information of some 21.5 million people, including those who applied for security clearances.

    Anticipating IS

    But Al Berman, president and CEO of Disaster Recovery Institute International, which covers IT disasters, said it would be dangerous to assume that IS would stop at communication and marketing.

    FILE - This screen grab from an Islamic State group-affiliated Twitter account, taken Sept. 20, 2014, purports to show a military commander handing a flower to a child while visiting southern Iraq. The group is a leader in using Internet-based communications.
    FILE - This screen grab from an Islamic State group-affiliated Twitter account, taken Sept. 20, 2014, purports to show a military commander handing a flower to a child while visiting southern Iraq. The group is a leader in using Internet-based communications.

    "This is not an unsophisticated organization. And if we look at it that way, we are vastly underestimating their capabilities," Berman told VOA.

    One path of attack that IS could take, Berman said, would be to siphon money from institutions — perhaps in the U.S., perhaps in the Middle East — in order to increase their funding as the extremist group's oil and tax money streams start drying up.

    "Money is incredibly important, and they will find other means if we shut down their traditional means," Berman said.

    And IS does not have to do the hacking itself, it just needs to buy the information from hacking-obtained information auctions on the dark web.

    Berman said IS could start to further refine their "social engineering" or "emotional marketing" techniques, basically by using the Internet in more sophisticated ways to track down and entice potential young recruits.

    Vulnerable universities

    For that, IS could hack into universities or buy information on the dark web from universities that have already been hacked.

    According to Privacy Rights Clearinghouse, a California-based nonprofit that focuses on privacy protection, in the last five years hackers have accessed more than 2.5 million records from colleges and universities in the United States alone.

    John Matherly, founder of Shodan, a search engine for Internet-connected devices, said exploiting student information would be far more likely than an IS attack on a facility such as a water treatment plant.

    "Universities and educational institutions tend to have the worst security by far because they have these giant IP ranges. So students use a public IP address that anyone can see, and everything is exposed," Matherly said.

    'Low-hanging fruit' for hackers

    Conversely, complex Internet-connected control systems — such as those in water treatment plants, office buildings, factories, traffic lights, and solar power farms — are not always difficult to access, but they are difficult to compromise.

    "There are devices that have no authentication. You don't need to provide a user name or a password. You can just access it; you can connect to it and talk. But there is a difference between connecting to a device and knowing what to do with it when you do," Matherly told VOA.

    "It is important to separate the ability to access a control system from the ability to damage that system," he said. "The more likely scenario is that someone logs in and runs different commands and by accident causes it to fail."

    But hackers such as IS do not have to be sophisticated to be damaging, Matherly said. Unpatched webservers, unprotected utility software accounts, individuals not keeping up with security updates, and even Instagram accounts could be easily attacked.

    "Control systems are expensive and a long-term effort," Matherly said. "I am sure they are already looking into it, but if you are only looking for attention, it is much more effective to go after low-hanging fruit, and there is plenty out there."


    Sharon Behn

    Sharon Behn is a foreign correspondent working out of Voice of America’s headquarters in Washington D.C  Her current beat focuses on political, security and humanitarian developments in Iraq, Syria and Turkey. Follow Sharon on Twitter and on Facebook.

    You May Like

    Former US Envoys Urge Obama to Delay Troop Cuts in Afghanistan

    Keeping troop levels up during conflict with both Taliban and Islamic State is necessary to support Kabul government, they say

    First Lady to Visit Africa to Promote Girls' Education

    Michele Obama will be joined by daughters and actresses Meryl Streep and Freida Pinto

    Video NYSE Analyst: Brexit Will Continue to Place Pressure on Markets

    Despite orderly pricing and execution strategy at the New York Stock Exchange, analyst explains added pressure on world financial markets is likely

    This forum has been closed.
    Comments
         
    There are no comments in this forum. Be first and add one

    Featured Videos

    Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
    Brexit Vote Plunges Global Markets Into Uncharted Territoryi
    X
    June 24, 2016 9:38 PM
    British voters plunged global markets into unknown territory after they voted Thursday to leave the European Union. The results of the Brexit vote, the term coined to describe the referendum, caught many off guard. Analysts say the resulting volatility could last for weeks, perhaps longer. Mil Arcega reports.
    Video

    Video Brexit Vote Plunges Global Markets Into Uncharted Territory

    British voters plunged global markets into unknown territory after they voted Thursday to leave the European Union. The results of the Brexit vote, the term coined to describe the referendum, caught many off guard. Analysts say the resulting volatility could last for weeks, perhaps longer. Mil Arcega reports.
    Video

    Video Orlando Shooting Changes Debate on Gun Control

    It’s been nearly two weeks since the largest mass shooting ever in the United States. Despite public calls for tighter gun control laws, Congress is at an impasse. Democratic lawmakers resorted to a 1960s civil rights tactic to portray their frustration. VOA’s Carolyn Presutti explains how the Orlando, Florida shooting is changing the debate.
    Video

    Video Tunisian Fishing Town Searches for Jobs, Local Development Solutions

    As the European Union tries to come to grips with its migrant crisis, some newcomers are leaving voluntarily. But those returning to their home countries face an uncertain future.  Five years after Tunisia's revolution, the tiny North African country is struggling with unrest, soaring unemployment and plummeting growth. From the southern Tunisian fishing town of Zarzis, Lisa Bryant takes a look for VOA at a search for local solutions.
    Video

    Video 'American Troops' in Russia Despite Tensions

    Historic battle re-enactment is a niche hobby with a fair number of adherents in Russia where past military victories are played-up by the Kremlin as a show of national strength. But, one group of World War II re-enactors in Moscow has the rare distinction of choosing to play western ally troops. VOA's Daniel Schearf explains.
    Video

    Video Experts: Very Few Killed in US Gun Violence Are Victims of Mass Shootings

    The deadly shooting at a Florida nightclub has reignited the debate in the U.S. over gun control. Although Congress doesn't provide government health agencies funds to study gun violence, public health experts say private research has helped them learn some things about the issue. VOA's Carol Pearson reports.
    Video

    Video Trump Unleashes Broadside Against Clinton to Try to Ease GOP Doubts

    Recent public opinion polls show Republican Donald Trump slipping behind Democrat Hillary Clinton in the presidential election matchup for November. Trump trails her both in fundraising and campaign organization, but he's intensifying his attacks on the former secretary of state. VOA National Correspondent Jim Malone reports.
    Video

    Video Muslim American Mayor Calls for Tolerance

    Syrian-born Mohamed Khairullah describes himself as "an American mayor who happens to be Muslim." As the three-term mayor of Prospect Park, New Jersey, he believes his town of 6,000 is an example of how ethnicity and religious beliefs should not determine a community's leadership. Ramon Taylor has this report from Prospect Park.
    Video

    Video Internal Rifts Over Syria Policy Could Be Headache for Next US President

    With the Obama administration showing little outward enthusiasm for adopting a more robust Syria policy, there is a strong likelihood that the internal discontent expressed by State Department employees will roll over to the next administration. VOA State Department correspondent Pam Dockins reports.
    Video

    Video Senegal to Park Colorful ‘Cars Rapide’ Permanently

    Brightly painted cars rapide are a hallmark of Dakar, offering residents a cheap way to get around the capital city since 1976. But the privately owned minibuses are scheduled to be parked for good in late 2018, as Ricci Shryock reports for VOA.
    Video

    Video Florida Gets $1 Million in Emergency Government Funding for Orlando

    The U.S. government has granted $1 million in emergency funding to the state of Florida to cover the costs linked to the June 12 massacre in Orlando. U.S. Attorney General Loretta Lynch announced the grant Tuesday in Orlando, where she met with survivors of the shooting attack that killed 49 people. Zlatica Hoke reports.
    Video

    Video How to Print Impossible Shapes with Metal

    3-D printing with metals is rapidly becoming more advanced. As printers become more affordable, the industry is partnering with universities to refine processes for manufacturing previously impossible things. A new 3-D printing lab aims to bring the new technology closer to everyday use. VOA's George Putic reports.
    Video

    Video Big Somali Community in Minnesota Observes Muslim Religious Feast

    Ramadan is widely observed in the north central US state of Minnesota, which a large Muslim community calls home. VOA Somali service reporter Mohmud Masadde files this report from Minneapolis, the state's biggest city.

    Special Report

    Adrift The Invisible African Diaspora