Adam Schiff on Critical Water Infrastructure Cyber Threats and Ransomware Attacks

Water Infrastructure Security Concerns

• 💧 Water and wastewater systems are identified as a critical issue at the intersection of water affordability, environmental quality, and national security.
• 💡 Senator Adam Schiff is working on a bill to provide the EPA with more tools to address cyber threats and resource water systems to fortify their cyber defenses without increasing consumer costs.

Prevalence of Ransomware Attacks

• ❓ A key concern is the prevalence of ransomware attacks on water systems, with a noted reluctance from organizations to report cyber incidents due to fear of reputational damage.
• 📈 While nation-state attacks tend to focus on data exfiltration and long-term presence, ransomware attacks are considered more prevalent and driven by criminal motives for financial gain.
• 🏥 The impact of ransomware is illustrated by examples of hospital systems in North Dakota and a past incident in California, highlighting the severe disruption and financial strain caused.

Reporting and Awareness of Attacks

• 🚫 There is currently no requirement for water systems to report cyber attacks, leading to a lack of clear understanding of how frequently these incidents occur.
• 📊 Water ISAC acts as a central repository for anonymized information on ransomware attacks, aiming to raise awareness and guide systems on addressing vulnerabilities.
• ⚠️ Destructive attacks have targeted smaller water systems, often as targets of opportunity due to unpatched software or open ports.

Attack Vectors and Vulnerabilities

• 🎣 Attackers cast a wide net by scanning for vulnerabilities, with spear-phishing campaigns and random port scans being common methods to identify exploitable systems.
• 💻 The search for vulnerabilities is broad, affecting both large utilities and small rural water systems equally, as attackers exploit unpatched software or open services.

Advanced Persistent Threats

• 🇨🇳 Major infiltrations, such as the Chinese 'Salt Typhoon' threat, are a serious concern within the cybersecurity community.
• 🤝 While there is increased information sharing from entities like the FBI and InfraGuard, and faster dissemination through ISACs, the effectiveness of acting on this intelligence remains uncertain.