The facts
One of the largest fuel pipelines in the United States, Colonial Pipeline, which connects gas stations, refineries, and airports in the eastern United States, recently suffered a cyberattack .
The attack
The company was forced to shut down all its systems following this cyberattack. It says it has hired a cybersecurity team to investigate and determine the nature of the attack. It appears to be ransomware, according to the statement released by the brand.
The White House has gotten involved: alongside Colonial Pipeline, President Joe Biden and his administration assure that they are striving to cause as little disruption as possible.
" It's an ongoing effort [...] We are working closely with the company, the state, and local officials to ensure that they resume normal operations as quickly as possible and that there is no disruption to supply. " said U.S. Secretary of Commerce Gina Raimondo on CBS.
Colonial Pipeline has managed to restart some of its machines. But it cannot say when the entire system will be back to normal.
"We will only bring our entire system back online when we believe it is safe to do so, with the green light from federal authorities," the company said.
The consequences
A potential fuel shortage is beginning to be felt in the Mid-Atlantic region. .
Andy Lipow, oil market specialist and president of consulting firm Lipow Oil Associates, told to AFP :
"The impact will depend on how long it lasts. The pipeline delivers refined products every five days."
The fateful decision
Joseph Blount, CEO of Colonial Pipeline, says he paid the ransom demanded by hackers: $4.4 million.
"I know it was a very controversial decision [...] I admit that I wasn't comfortable with seeing money evaporate and go to such people [...] But it was the right thing to do for the country," he told the Wall Street Journal.
According to the US police, the cybercriminal group DarkSide is believed to be behind this attack.
In general, the ransom is paid in bitcoins by organizations. However, this information has not been confirmed by the head of Colonial Pipeline.
He adds that after the machines are restarted, restoration work will continue for months. The cost: tens of millions of dollars. (source: La Tribune)
Our advice
Avant de Cliquer reminds you that it is essential to make your users aware of the risks of phishing and to implement technical and, above all, organizational solutions. We therefore advise you not to click, pay, or respond to any malware whatsoever.
When it comes to ransomware, paying the amount requested does not guarantee that you will recover your data. On the contrary, your bank details will also end up in the hands of hackers.
Their objectives: to use it against you for malicious purposes.
