Blog

Cyber Kill Chain applied to ICS

The process of fulfilling an attack implies many previous stages before arriving to the visible stage of the attack, that is, to the moment when the security of a system, company or industry is compromised. The cyber kill chain describes all those previous stages and establishes preventive actions for each of them.

Tags:

Incident

Industrial Control System

Threats

United Against Cyberthreats: Information Sharing

The well known motto "there is strength in numbers" perfectly describes the beneficial situation that involves collaboration and knowledge sharing on cyber threats. The concept of Information Sharing bring to us the idea of establishing methods to share and take full benefit of the gathered knowledge among all actors. Among these partners, CERT and security companies play a key role in defining consensus documentation and the pathway for sharing knowledge effectively.

Tags:

Protecting yourself from BlackEnergy: detecting anomalies

The attack on the Ukrainian power grid has caused a lot of commotion at the global level. These kinds of attack on control systems are highly targeted and planned, but is there anything we can do to prevent them?

Tags:

Critical infrastructures

Incident

Industrial Control System

Malware

Rootkit

BlackEnergy and critical systems

In December 2015 part of the electricity sector in Ukraine was attacked by the Trojan BlackEnergy. This modular Trojan that allows different additional malware to be loaded left a million and a half people without electricity.

Tags:

APT

Critical infrastructures

Incident

Industrial Control System

2015 Cybersecurity Highlights log

Nobody can deny that computer security is a vital issue in our lives, affecting all of us. It is not uncommon to see articles on themes related to or speaking directly about computer security in newspapers or mainstream publications. The INCIBE_ Cybersecurity Highlights log aims to gather together articles published on events or incidents related to computer security based on their importance...

Tags:

Android

iOS

Critical infrastructures

Use and Abuse of DNS

DNS is a protocol present in almost all network communications and therefore very attractive as a tool of attack and / or distribute malicious software such as viruses, botnets and malware. In this article some both offensive and defensive strategies based on the use of DNS are briefly outlined.

Tags:

Best practices

Data protection

Incident