Researchers said to discover power grid-wrecking software

PARIS — Researchers discover a troubling breed of power grid-wrecking software, saying in a report published Monday that the program was very likely responsible for a brief blackout in Ukraine late last year.

The malicious software has the ability to remotely sabotage circuit breakers, switches and protection relays, the report says, a nightmare scenario for those charged with keeping the lights on.

“The potential impact of malware like this is huge,” says Robert Lipovsky, a researcher who helped draw up the report for Slovakian anti-virus firm ESET. “It’s not restricted to Ukraine. The industrial hardware that the malware communicates with is used in critical infrastructure worldwide.”

Policymakers have long worried over programs that can remotely sabotage industrial systems because of their potential to deal catastrophic damage across the internet. Examples of hackers being able to turn off the lights were once confined to the movie screens, but that is slowly changing. In 2010 researchers discovered Stuxnet, a groundbreaking piece of malware apparently designed to sabotage Iran’s nuclear program by sending its centrifuge machines spinning out of control.

Last year’s power outage appears to have been a sequel to Stuxnet. Ukrainian officials have already described the Dec. 17, 2016, outage at a transmission facility outside Kiev, the capital city, as a cyberattack.

The report drawn up by ESET and Dragos, Inc. — a Maryland-based firm that specializes in industrial cybersecurity — adds technical details, saying that the malware was designed to communicate directly with industrial control systems, flipping circuit breakers on and off with a string of code before mass-deleting data in a bid to cover its tracks.

— AP