Cyberattackers Target Nuclear Waste Company via LinkedIn
The hackers were unsuccessful in their attempt, but this is not the first time the company has experienced this kind of attack.
![A person holding a phone with the LinkedIn app open; two animated people speaking in the background A person holding a phone with the LinkedIn app open; two animated people speaking in the background](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blta1a12671dca0619e/64f1690f5375e5287c20408d/linkedin_Alekesey_Zotov_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Last week, a group of hackers targeted Radioactive Waste Management (RWM), a UK government-owned company behind the country's multibllion-dollar Geological Disposal Facility (GDF) nuclear waste-storage project, using social engineering and LinkedIn.
RWM merged last year with two other companies to create Nuclear Waste Services (NWS), which also administers the Low Level Waste Repository in Cumbria, UK. Corhyn Parr, NWS's chief executive, noted that the attackers have been capitalizing on the business changes stemming from that merger to try to dupe targets into falling for social engineering gambits, largely through LinkedIn. So far, though, none of the attempts have had any "material effect," he added.
"NWS has seen, like many other UK businesses, that LinkedIn has been used as a source to identify the people who work within our business," a company spokesperson told the Guardian. The attackers, however, were denied through what a company spokesperson referred to as "multi-layered defenses."
Hackers will use social media sites to create fake accounts, write false messages, and send malicious links, as well as gather information to improve their messaging, all in order to gain access to a company's system through phishing or malware.
According to LinkedIn itself, in order to avoid becoming the victim of these types of scams or social engineering attacks, users should avoid engaging with impersonal messages, any messages asking for personal or financial information, messages with noticeable grammar and spelling mistakes, and messages including offers that are overly generous or “too good to be true.”
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024