US government agencies are tracking cyber threats against nearly 20 shipping vessels around the world, according to US officials familiar with the situation.
The Coast Guard has asked for advance notice if any of those ships plan to come into a US port, said the three people, who asked not to be identified because they aren’t authorized to speak publicly about the matter. The vessels’ specific destinations and manifests weren’t immediately known.
Several commercial vessels were targeted in potential cyberattacks in late August, one official at the federal Cybersecurity and Infrastructure Security Agency said, noting that hackers didn’t appear to have taken c
ontrol of the targeted ships themselves. The Coast Guard is now tracking the vessels alongside FBI and Department of Homeland Security units, a Homeland Security official said.
Warnings about cyberattacks targeting the maritime sector have escalated in recent years with shipping vessels becoming increasingly dependent on digital systems for navigation, communications and othe
r operations. Governments and security researchers have repeatedly cautioned that hackers are seeking to exploit those systems to disrupt supply chains. The cyber risks are plaguing a global shipping industry already under strain from wars and geopolitical rivalries.
The US Coast Guard said in a statement that it boarded two inbound foreign-flagged commercial vessels in the Gulf of Mexico to “ensure integrity of the vessel’s ope
rational and information technology systems following indications that the networks of both vessels were compromised.” The first vessel was boarded on Aug. 21 to mitigate threats and the second on Aug. 24.
Watch More Image Part 2 >>>
“Currently, there are no reports of operational disruptions, vessel instability, physical danger to crews, or environmental impacts,” the Coast Guard said, adding that it’s actively communicating with port operators, vessel owners and other stakeholders.
Antonio Cassidy, director of services at London-based maritime cybersecurity firm CyberOwl, said he hadn’t seen any indication of a broader hacking campaign targeting oil and gas tankers. But CyberOwl, which monitors cybersecurity on vessels, had observed a sharp increase in the number of incidents on ships in the first half of this year, Cassidy said.
In the case of more than half of the attempted intrusions that CyberOwl detected on the vessels it tracks, malware had been introduced to the vessels’ computers through storage devices, according to a company report. Most of the others came by way of an internet download or phishing.
