Risk

Virus Hits Part Of U.S. Commerce Dept.

Economic Development Administration has disabled its website and email while attack is investigated.

Best Government Web Sites
(click image for larger view)
Slideshow: Best Government Web Sites
A virus has caused the Department of Commerce's Economic Development Administration (EDA) to disable its email and Internet access indefinitely while the nature and origin of the attack is investigated.

Visitors to the EDA's website are greeted with a banner across the top with the message that the agency's site and email system is "experiencing a disruption in service."

"The agency is working to address the issue and resume normal operations as soon as possible," according to the message.

In the meantime, the EDA--which awards business-development grants to communities that need economic stimulation--has put up a simple, temporary website giving people access to key information, such as funding opportunities and contact information.

[ FBI warns that hack attacks will increase. See Cyber Attacks Becoming Top Terror Threat, FBI Says. ]

"We continue to operate as fully as possible to meet our core mission," the agency said in an emailed statement, adding that it is still processing grant applications and serving customers. Staffers will be working using phone and fax lines until service is restored.

Commerce spokeswoman Jennifer Friedman confirmed in an interview Friday that the department isolated the network and systems by disconnecting them out of caution on Jan. 24 after a virus attack. The attack is still under investigation by the department's IT team, the United States Computer Emergency Readiness Team (US-CERT), and an outside team of experts.

Officials don't have details on the scope of the attack nor do they know when the systems will be back online, she said.

The virus initially was discovered Jan. 20, after which EDA IT staff issued McAfee system updates to all EDA staff computers over the next several days. However, the EDA discovered additional virus contamination, which led to the disconnection of the systems.

The feds haven't had the best luck lately keeping their websites at the top of their service, but this has been mainly due to back-end issues rather than security woes.

Sites that have experienced service disruptions over the last several months include the Defense Information System Agency, USA.gov, and CIO.gov.

However, security was the cause of a shutdown of Internet access at another federal department website in the last year. A phishing attack on the Department of Energy's Oak Ridge National Laboratory last April caused the lab to shut down Internet and email access for more than a week.

InformationWeek's 2012 Government IT Innovators program will feature the most innovative government IT organizations in the 2012 InformationWeek 500 issue and on InformationWeek.com. Does your organization have what it takes? The nomination period for 2012 Government IT Innovators closes April 27.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
h4zzmatt@yahoo.com
50%
50%
[email protected],
User Rank: Apprentice
2/4/2012 | 2:51:16 PM
re: Virus Hits Part Of U.S. Commerce Dept.
They shut the network down because of a simple virus? There is something missing from this article. People do not shut down networks and turn off email for simple viruses anymore. They stopped doing that back in the 90s. Either an IT admin is incompetent at his job or there is something else going on here, some sort of APT attack perhaps. Unfortunately there is not enough detail in the article to know for sure.

-h4zzmatt
Russia Hacked Clinton's Computers Five Hours After Trump's Call
Robert Lemos, Technology Journalist/Data Researcher,  4/19/2019
Why We Need a 'Cleaner Internet'
Darren Anstee, Chief Technology Officer at Arbor Networks,  4/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-11506
PUBLISHED: 2019-04-24
In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to Expo...
CVE-2019-8991
PUBLISHED: 2019-04-24
The administrator web interface of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO Silver Fabric Enabler for ActiveMatrix BPM, and TIB...
CVE-2019-8992
PUBLISHED: 2019-04-24
The administrative server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for TIBC...
CVE-2019-8993
PUBLISHED: 2019-04-24
The administrative web server component of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, TIBCO ActiveMatrix Policy Director, TIBCO ActiveMatrix Service Bus, TIBCO ActiveMatrix Service Grid, TIBCO ActiveMatrix Service Grid Distribution for ...
CVE-2019-8994
PUBLISHED: 2019-04-24
The workspace client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contains vulnerabilities where an authenticated user can change settings that can theoretically adversely impact oth...