【2018 Archives】

Russian hackers don't just go after emails.

A report released Thursday afternoon by the United States Computer Emergency Readiness Team (US-CERT) details an alleged years-long Russian effort to infiltrate018 Archivescontrol critical infrastructure across the U.S. And in many cases they appear to have succeeded.

SEE ALSO: Russian hacking group Fancy Bear targets hundreds of journalists

"Since at least March 2016, Russian government cyber actors—hereafter referred to as 'threat actors'—targeted government entities and multiple U.S. critical infrastructure sectors, including the energy, nuclear, commercial facilities, water, aviation, and critical manufacturing sectors," reads the warning. It was based on analysis from the Department of Homeland Security (DHS) and the FBI.

The report notes that a variety of methods were used by the hackers to work their way into computer systems across the country, including but not limited to "spear-phishing emails (from compromised legitimate account)," "watering-hole domains," and "open-source and network reconnaissance."

The hackers are said to have straight up gotten access to workstations "that contained data output from control systems within energy generation facilities."

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

Original image has been replaced. Credit: Mashable

Basically, if they had wanted to, the hackers likely could have wreaked some serious havoc — like turning things off.

In addition to dropping this news, US-CERT also released a detailed list of best practices that businesses in critical industries should follow. On top of things like training people how to use email better (really), the team recommended mandating two-factor authentication for employees and establishing rules for complex passwords.

Those are both good ideas, if not rather basic.

One of the recommended best practices in particular, however, suggested that the situation was really bad. "Based on the suspected level of compromise, reset all user, administrator, and service account credentials across all local and domain systems."

Basically, change allof your passwords on everything. Yeah, not a good look.

---

Featured Video For You

---

Here's 5 tips for Spring cleaning your digital footprint

---

Topics Cybersecurity

• Tech
• Shopping
• Deals
• Games
• Social Good
• Life
• Science
• Entertainment

• The 12 Best Games on the iPhone
• Kim Kardashian addresses her blackface controversy and promises she's realizing stuff
• Google's AI starts answering Verizon support calls
• Watch Hulu's Freestyle Love Supreme doc, then check out the TV series
• The Best Skyrim Mods
• Twitter shut down a Trump retweet thanks to Linkin Park
• Study uncovers clever way to get people to eat their veggies
• How to teach sustainable habits to kids
• SpaceX will try to achieve 2 impressive feats on Monday
• 20+ apps and websites to help you live a more sustainable life

• 'Dying Light 2' review: A stellar sequel bookended by a slow start and a weak finish
• Roland Emmerich's 'Moonfall' crashes and burns
• 'The Wire' creator's reported ban from Twitter sparks outrage
• Facebook records loss in daily users for first time
• How to turn on YouTube's dark mode
• Spotify apparently deleted over 100 'Joe Rogan Experience' episodes
• Mom has lunch in same restaurant as Andrew Garfield, boldly asks him to record video for her son
• 'Dordle' is a simultaneous double
• Give this dog a Dundie for recreating the entire opening intro of 'The Office'
• Sellout crowd leads to shutdown of L.A. pride event

• Getting Started with Gmail Keyboard Shortcuts
• Uber jumps through hoops to keep drivers 'independent contractors'
• Pence adds more pets to the Second Family menagerie
• Uber exec laments Uber's bad culture, doesn't mention Travis Kalanick
• Great white shark leaps into tiny boat, fisherman treats it like NBD
• Watch Hulu's Freestyle Love Supreme doc, then check out the TV series
• Pipeline problem? This tech company says 'No excuses' with a transparent diversity report
• Michelle Obama celebrated Father's Day with this precious throwback photo
• Best free AI courses in April 2025
• 'Shadow Warrior 3' developers want players to feel overpowered

• Best LG B4 OLED TV deal: Save $200 at Best Buy
• Woman replaces her family photos with photos of her dog and it's genius
• NFL stars declare #WeWantToPlay as the league's pandemic fumbles go on
• Delivery apps become essential for restaurants to survive during pandemic
• Best free online courses from Stanford University
• Uber finally, finally adds tipping
• Google's AI starts answering Verizon support calls
• 'Ghost of Tsushima': How to master the virtual samurai ways
• Then and Now: 5 Generations of GeForce Graphics Compared
• The best way to remember proper mask hygiene? Treat it like your underwear.