DOE Warns of Chinese Hackers

Chinese hackers are apparently the newest threat to US energy infrastructure.  As the late, great Yogi Berra once pontificated, it’s like déjà vu all over again!

We’ve been hearing about Russian hackers for some time, but now, according to the Department of Energy (DOE), there are some bad apples in China that need to be dealt with. 

Why the DOE is Worried about Chinese Hackers

The Chinese hackers are part of a group known as “APT 10,” and the group has been operating on behalf of the Chinese Ministry of State Security for the past 4 years.  Yes, you heard that right – these bad apples are actually sanctioned by the Chinese government, and the DOE wants to hold these governmental decision-makers accountable.

The DOE claims that APT 10 has already gained “extensive” access to multiple companies in the US and at least 12 other countries.  APT 10 utilizes malware downloaded on company computers to gain backdoor access.  Once entry has been gained, the Chinese hackers steal confidential information and other intellectual property from targets within the energy, healthcare, communications, and manufacturing industries. 

Although it’s not clear if electric, oil, natural gas or water infrastructure has been targeted, the DOE is clearly concerned about this risk.  The DOE’s warning features terse language that promises swift and aggressive counter-measures to any energy system hacking effort. 

In my opinion, our nation’s utility infrastructure can and will be targeted by malicious cyber actors.  It’s not a matter of if, it’s a matter of when.  Whether we’re talking about Russian, terrorist, or Chinese hackers, cybersecurity optimization should be near the top of every utility’s priority list.