Britain’s energy sector targeted by ‘state-sponsored’ hackers

“The NCSC is aware of connections from multiple UK IP addresses to infrastructure associated with advanced state-sponsored hostile threat actors, who are known to target the energy and manufacturing sectors,” it reportedly states.

“NCSC believes that due to the use of wide-spread targeting by the attacker, a number of industrial control system engineering and services organisations are likely to have been compromised.”

The document says the organisations form part of the supply chain for critical national infrastructure and that some probably have remote access to key systems. The wave of suspected attacks began on 8 June and may have targeted the water sector as well.

The news comes after the Times reported last week that group of hackers linked to Russia’s GRU intelligence agency had attempted to infiltrate energy control systems in the Republic of Ireland.

Emails containing malicious software were sent to senior engineers at the state-owned energy firm ESB. Security experts told the paper that although there was no evidence of disruption to the power grid in Ireland, the attackers had probably obtained important information including engineers’ passwords.

A spokesperson for the NCSC told Network it does not comment on the veracity of leaks, adding: “The cyber security of the UK is a top priority for government.

“The government are investing £1.9 billion in the national cyber security strategy and have opened the National Cyber Security Centre who are working with public and private sector organisations to make the UK the safest place for everyone to live and do business online.”