Cyber Targeting the Maritime Economy

securityaffairs.co

In the 1990’s the Irish Mafia, traditional La Cosa Nostra operatives, the Hell’s Angels and corrupted port workers controlled the Port of Montreal.  This port was a gateway to both rail and highway transportation for eastern and central Canada and much of the U.S.  Their method of operation was basically accomplished by hardline phones (some cell phones), fax machines and old fashion extortion, corruption and hostile intimidation.  They were very successful for many years.  Imagine now, 2016, the current digital landscape and the vast network of bad actors has enhanced their bent on both criminal and terrorist port targeted agendas.  

Wapack Labs CEO J. Stutzman trusts that since our service has worldwide data connections, there is a very high probability that we possess maritime industry account information which would indicate data - exposing bad actors tracking ships and shipment information.  This in reality has already been proven by Wapack Labs through innovative collection and analysis methods.  This information is being supplied for your situational awareness; with more to follow. 

Publication date:                             15 September 2016

Handling requirements:                   Traffic light protocol (TLP) GREEN

Attribution/Threat Actors:               Port cyber compromise

Actor Type:                                      Tier III to IV          

Potential Targets:                             USA / International

Past Reporting:                                 DOC-3881, DOC-4204

The full attribution report has been published in its entirety in the Red Sky Alliance portal.  For more information please contact the lab directly at 844-4-WAPACK, 603-606-1246, or feedback@wapacklabs.com.

About Wapack Labs

Wapack Labs, located in New Boston, NH is a Cyber Threat Analysis and Intelligence organization supporting the Red Sky Alliance, the FS-ISAC and individual organizations by offering expert level targeted intelligence analysis answering some of the hardest questions in Cyber.  Wapack Labs’ engineers, researchers and analysts use deep analysis techniques and visualization to design and deliver transformational cyber-security analysis tools that fuse open source and proprietary information.  The intelligence derived from these tools and techniques serve as the foundation of Wapack Labs’ information reporting to the cyber-security teams of its customers and industry partners located around the world.

Cyber Targeting of The Court For Arbitration Of Sport - Attribution for Olympic doping related bans?

Wapack Labs analysts recently discovered a typosquatted domain tass-cas.org likely targeting The Court of Arbitration for Sport (CAS, tas-cas.org) – international organization with headquarters in Switzerland. 

Wapack Labs believes that this may be part of a larger campaign caused by CAS decisions regarding doping-related bans of Russian athletes regarding Olympic and Paralympic Summer Games 2016. 

The larger campaign includes hacking attacks on the CAS website, and cyber attacks against partner organizations, for example against the World Ani-Doping Agency (WADA) - previously reported in the Red Sky Alliance portal.

Date: 18 August 2016; information cutoff date: 16 August 2016

Handling requirements:  Traffic light protocol (TLP) Amber

Attribution/Threat Actors: Russian (medium confidence)

Actor Type: Tier I-V                    

Potential Targets: Court of Arbitration for Sport (CAS), their partners and clients

This report was published in its entirety to the Financial Services ISAC and Red Sky Alliance portal on August 1, 2016.  For more information, contact Wapack Labs at 844-4-WAPACK.