Security

Russia's Sandworm Hackers Attempted a Third Blackout In Ukraine (wired.com) 40

An anonymous reader quotes a report from Wired: More than half a decade has passed since the notorious Russian hackers known as Sandworm targeted an electrical transmission station north of Kyiv a week before Christmas in 2016, using a unique, automated piece of code to interact directly with the station's circuit breakers and turn off the lights to a fraction of Ukraine's capital. That unprecedented specimen of industrial control system malware has never been seen again -- until now: In the midst of Russia's brutal invasion of Ukraine, Sandworm appears to be pulling out its old tricks.

On Tuesday, the Ukrainian Computer Emergency Response Team (CERT-UA) and the Slovakian cybersecurity firm ESET issued advisories that the Sandworm hacker group, confirmed to be Unit 74455 of Russia's GRU military intelligence agency, had targeted high-voltage electrical substations in Ukraine using a variation on a piece of malware known as Industroyer or Crash Override. The new malware, dubbed Industroyer2, can interact directly with equipment in electrical utilities to send commands to substation devices that control the flow of power, just like that earlier sample. It signals that Russia's most aggressive cyberattack team attempted a third blackout in Ukraine, years after its historic cyberattacks on the Ukrainian power grid in 2015 and 2016, still the only confirmed blackouts known to have been caused by hackers.

ESET and CERT-UA say the malware was planted on target systems within a regional Ukrainian energy firm on Friday. CERT-UA says that the attack was successfully detected in progress and stopped before any actual blackout could be triggered. But an earlier, private advisory from CERT-UA last week, first reported by MIT Technology Review today, stated that power had been temporarily switched off to nine electrical substations. Both CERT-UA and ESET declined to name the affected utility. But more than 2 million people live in the area it serves, according to Farid Safarov, Ukraine's deputy minister of energy. [...] The revelation of Sandworm's attempted blackout attack provides more evidence that Russia's invasion of Ukraine has been accompanied by a new wave of cyberattacks on the country's networks and critical infrastructure, though with only mixed success.

Bitcoin

Why Isn't Bitcoin Booming? (nytimes.com) 168

"Bitcoin was seen by many of its libertarian-leaning fans as a kind of doomsday insurance," argues a columnist in the New York Times, "a form of 'digital gold' that would be a source of stability as the world grew more chaotic and unpredictable....

"But Bitcoin hasn't boomed.... Bitcoin prices are down 10 percent in the past month, and Ether, the second most popular crypto coin, is down roughly 15 percent.Day-to-day usage of cryptocurrencies isn't picking up the way you'd expect, either. Bitcoin trading volume rose after Russia invaded Ukraine, but it has remained relatively flat since, suggesting that people aren't rushing to trade their rubles and hryvnia (Ukraine's currency) for digital currencies. Russian oligarchs don't appear to be using crypto to evade sanctions en masse, either, despite initial fears that they might...."

The column ultimately argues that bitcoin isn't playing a central role in the unfolding crisis. "Which raises the obvious question: Why not?" One possibility is that crypto is still too confusing and too difficult for normal people to use, especially during a war. Internet access is spotty in many parts of Ukraine, and reports have suggested that even the country's elites are struggling to convert their assets into crypto.

Another possibility, popular among skeptics of Bitcoin and other cryptocurrencies, is that Bitcoin is still too volatile to be useful as a hedge against economic and political instability. "The Bitcoin and crypto communities have been selling a false narrative all these years that Bitcoin is supposed to be a safe haven from the traditional financial markets," said Jimmy Nguyen, the president of the Bitcoin Association, a cryptocurrency trade group. (His group promotes a Bitcoin spinoff, Bitcoin SV, that sees itself as a more useful version of the cryptocurrency.) Bitcoin is doomed, Mr. Nguyen argues, because it can be slow and expensive to process transactions, making it less useful for paying for things. "And so a lot of Bitcoin supporters have had to come up with this argument that it's meant to be a reserve asset," he said.

Kevin Werbach, a professor of legal studies and business ethics at the Wharton School at the University of Pennsylvania, floated a different theory. Bitcoin's earliest and most vocal adopters, he said, tended to be libertarians who saw cryptocurrency as a kind of insurance policy against hyperinflation and government corruption. But the more recent price swings in the crypto markets attracted a surge of speculators who viewed Bitcoin and other cryptocurrencies mainly as investments, and cared less about their political implications. "There's a tremendous amount of rhetoric around Bitcoin in particular that suggests that it's predominantly a means of escaping from the government-issued fiat currency system," he said.

"And yet most of the activity, according to basically every rigorous study that's been done, is predominantly people speculating...."

CNN got another reaction from Eswar Prasad, a professor at Cornell's Dyson School of Applied Economics and Management, also a senior fellow at the Brookings Institution and the author of "The Future of Money: How the Digital Revolution is Transforming Currencies and Finance."

The professor's opinion? While bitcoin "has failed in its stated purpose as a medium of exchange for conducting transactions, it has become a speculative financial asset..." The Russian government cannot count on bitcoin to evade sanctions — after all, payments for international transactions still need to be settled in real money such as dollars or euros. Furthermore, cryptocurrencies cannot in any significant way prevent a country's currency from collapsing in value relative to major reserve currencies since those values are determined in formal financial markets. Cryptocurrencies might in fact hurt Russia if they are seen by the country's citizens as a better option than the plunging domestic currency. Thus, bitcoin might end up precipitating a flight of deposits from Russia's banking system and even as a conduit for capital flight out of the country.

Slashdot Top Deals