Lion's office will be closed on Friday, July 4, in observance of Independence Day. For help with online training, please contact support@lion.com.
Search

Hackers Attack Industrial Safety Systems with New Malware

Posted on 12/18/2017 by Roger Marks

Malware-Blog.jpgWhile industrial cyber-security is not our typical fare here at Lion News, a recent attack on an industrial facility safety system could be of concern to our readers.

Industrial security company FireEye reported on December 14 that an attacker had deployed malware dubbed “Triton” or “Trisis” to disrupt safety instrumented systems (SIS) at a Middle East critical infrastructure facility. The exact location and name of the facility is being withheld at this time.

The Triton malware is aimed at critical safety systems used by oil and gas, nuclear energy, and manufacturing plants. The creators of the safety shutdown system targeted by the malware attack have released a security notification that includes cybersecurity recommendations for potentially affected customers.

This week, the Department of Homeland Security released a report on the TRITON/TRISIS malware.
 
While this is not the first time hacking has been used to disrupt industry or government facilities, Triton—initially identified in August 2017—is the first type of malware built specifically to attack safety systems, according to web security firm Symantec. 

Security company Dragos has published a report on the newly identified malware threat as well.


What Can Industrial Security Malware Do?

The Triton malware employed in this attack can impact safety instrumented systems (SIS) in three major ways:
  1. Shut down an industrial process that was running safely, harming the facility’s production output and bottom line. This also has environmental consequences, as releases from industrial equipment are often more pronounced during start-up and shut-down.
  2. Re-program the SIS to prevent it from recognizing unsafe conditions, putting people and the environment in danger—most immediately those employees who work around the automated process who may be injured by an unexpected release of hazardous chemicals or stored energy
  3. Manipulating the industrial process into an unsafe state and disabling the SIS, putting workers, the environment, and the company’s equipment in great danger.
Note: For regular reports about chemical facility security, Lion News staff recommends Patrick Coyle’s Chemical Facility Security News blog.


Effective Online OSHA Safety Training

Available 24/7, Lion’s interactive OSHA safety training courses are designed to satsify OSHA's 29 CFR safety standards and empower workers to identify, mitigate, and avoid the hazards in your workplace.

Employees who complete OSHA training at Lion.com are ready to make on-the-job decisions that keep themselves and their co-workers safe. Our 10 Hour OSHA General Industry course focuses on hazard identification, avoidance, and control and prevention measures and includes several modules on electrical safety.

Tags: chemicals, facility security, osha, safety, security, security plan

Find a Post

Compliance Archives

Lion - Quotes

Excellent course. Very interactive. Explanations are great whether you get the questions wrong or right.

Gregory Thompson

Environmental, Health & Safety Regional Manager

Lion's training was by far the best online RCRA training I've ever taken. It was challenging and the layout was great!

Paul Harbison

Hazardous Waste Professional

I chose Lion's online webinar because it is simple, effective, and easily accessible.

Jeremy Bost

Environmental Health & Safety Technician

The instructor kept the class engaged and made learning fun. There was a lot of information to cover but time flew by. I will definitely use Lion in the future!

Chelsea Minguela

Hazmat Shipping Professional

If I need thorough training or updating, I always use Lion. Lion is always the best in both instruction and materials.

Bryce Parker

EHS Manager

This course went above my expectations from the moment I walked in the door. The instructor led us through two days packed with useful compliance information.

Rachel Stewart

Environmental Manager

Excellent job. Made what is very dry material interesting. Thoroughly explained all topics in easy-to-understand terms.

David Hertvik

Vice President

I think LION does an excellent job of any training they do. Materials provided are very useful to my day-to-day work activities.

Pamela Embody

EHS Specialist

I have over 26 years of environmental compliance experience, and it has been some time since I have attended an environmental regulations workshop. I attended this course as preparation for EHS Audits for my six plants, and it was exactly what I was looking for.

Frank Sizemore

Director of Regulatory Affairs

I attended training from another provider and learned absolutely nothing. Lion is much better. Hands down.

Nicole Eby

Environmental Specialist

Download Our Latest Whitepaper

Tips to identify and manage universal waste under more-stringent state regulations for generators and universal waste handlers in California.

Latest Whitepaper

By submitting your phone number, you agree to receive recurring marketing and training text messages. Consent to receive text messages is not required for any purchases. Text STOP at any time to cancel. Message and data rates may apply. View our Terms & Conditions and Privacy Policy.