Sources Claim Telvent Hacking Linked to Group in China

By Ed Silverstein September 28, 2012

There are reports that the recent hacking of a Canadian software maker was linked to a source in China. The Canadian government is not confirming the allegation, however, and China denies it.

Telvent, owned by France's Schneider Electric SA, affected the company’s system in the United States, Canada and Spain, according to KrebsOnSecurity.com. The website also said its sources are blaming the attack on Chinese hackers.

Canadian officials, however, did not identify the source of the attack as China, Reuters said. The Chinese government denies it was involved in the hacking.

Telvent manufactures software used by energy companies to manage the production and distribution of electricity. Its technology is used for power grids and smart energy technology.

The hackers broke into Telvent’s network, installed malicious software and apparently took files, The Register reported. The attack may have affected some customer files, The Register added.

“Criminals can now study the documents for vulnerabilities in the systems, and potentially devise attacks to sabotage nations' electricity distribution networks,” The Register warned.

Telvent systems manage over 60 percent of the total hydrocarbon movements in North and Latin America, and controls transmission and distribution of over 140,000 GWh via electrical grids.

The Register says Dell SecureWorks alleges the “Comment Group” could be responsible for the hacking. The Comment Group is a large and active hacking group in China, according to Sophos.

Meanwhile, Telvent cut data links between some of its internal network and clients' systems, while it investigates the attack.

“Although we do not have any reason to believe that the intruder(s) acquired any information that would enable them to gain access to a customer system, or that any of the compromised computers have been connected to a customer system, as a further precautionary measure, we indefinitely terminated any customer system access by Telvent,” the company said in a statement carried by Sophos.

Dale Peterson, founder of Digital Bond, told Wired that "some project files contain the 'recipe' for the operations of a customer, describing calculations and frequencies at which systems run or when they should be turned on or off.”

Telvent informed customers about the attack in a recent letter. The hacking was discovered on Sept. 10.

Last year, Chinese officials denied it was involved in the alleged hacking of U.S. civilian satellites, TechZone360 said.




Edited by Braden Becker

TechZone360 Contributor

SHARE THIS ARTICLE
Related Articles

GENBAND & Sonus Go Dutch for Merger

By: Maurice Nagle    5/23/2017

Mergers and acquisitions are the norm in business. However, it's not every day that two major cloud communications players with highly complementary o…

Read More

The Killer App for VR: The Ability to Meet Yourself

By: Rob Enderle    5/23/2017

I was at a VR event this week, and I'm sure the speaker misspoke when he said that one of the benefits of VR is the ability to meet yourself. But the …

Read More

WannaCry Ransomware Holds Files Hostage: Best Practices to Avoid Being a Victim

By: Special Guest    5/23/2017

More than 200,000 computers in more than 150 countries were crippled by a massive ransomware attack, dubbed WannaCry, and security experts warned that…

Read More

LeoSat Secures Japanese Investment for Enterprise Broadband Satellite Network

By: Doug Mohney    5/23/2017

Another broadband satellite cloud network moved closer to reality this month, with LeoSat securing an investment from SKY Perfect JSAT (SJC) Corporati…

Read More

Organizations Can Combat WannaCry & Jaff Ransomware With Well Instrumented DNS

By: Special Guest    5/22/2017

The Infoblox Intelligence Unit observed two global malware outbreaks on Friday, May 12. Although there is no indication that the two attacks were rela…

Read More