Live data from Hacker News

Poland's energy grid was targeted by never-before-seen wiper malware

arstechnica.com

51–60 of 158 posts

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#51
post #10

Earlier quoted context omitted.

Does Europe overall feel and act like that’s the case though? It seems as if the European war has been pushed to the background recently, and most people kind of forgot about it. If you walk down the streets of Paris or Berlin does it look like it’s wartime, do people talk about it much, do they share the latest front news and so on?

>If you walk down the streets of Paris or Berlin does it look like it’s wartime, Like what exactly would you want them to do? Run around screaming all day because there's a war in another country 2000 km away from them? No, people just go on with their lives, doing their jobs, taking care of family and friends, paying their taxes, so that specialized workers in the ministry of defence can take care of the war stuff f…

> It's even similar in Kiev, when you walk down the streets you see people living their lives. Gyms, bars, cafes, clubs are full and lively. People don't stop living and enjoying their daily lives just because there's shelling somewhere else in the country.

While it's true to a certain degree, you make it sound like Kyiv residents are having a grand old time right now. But in reality, the majority are trying very hard to keep from freezing to death as Russian attacks targeting their power and heating infrastructure have destroyed much of it.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#52
post #32

Earlier quoted context omitted.

Then you're missing the point. If they succeed they may well not be reversible. The question is if this had succeeded would we have shrugged it off again or responded appropriately?

Can you give some examples of? I can imagine that under the right circumstances you might succeed in blowing up some transformers or even a turbine, but it seems like you’d be up to speed within a month or two on the outside? Or am I missing the gravity somehow?

It's middle of winter, and it gets pretty danged cold. Being without power in such weather might well end up being deadly, even with short durations.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#53
post #32

Earlier quoted context omitted.

Can you give some examples of? I can imagine that under the right circumstances you might succeed in blowing up some transformers or even a turbine, but it seems like you’d be up to speed within a month or two on the outside? Or am I missing the gravity somehow?

Transformers and turbines of any significance are not off the shelf parts and can have lead times of years

> Transformers and turbines of any significance are not off the shelf parts and can have lead times of years

Bloomberg had a decent article[0] about transformers and their lead time. They're currently a bottleneck on building. It wasn't paywalled for me.

"The Covid-19 pandemic strained many supply chains, and most have recovered by now. The supply chain for transformers started experiencing troubles earlier — and it’s only worsened since. Instead of taking a few months to a year, the lead time for large transformer delivery is now three to five years. " [0]

[0] https://www.bloomberg.com/features/2025-bottlenecks-transfor...

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#57
post #7

Earlier quoted context omitted.

before anyone jumps on the pedantry bandwagon, its worth noting that even though open war hasn’t been called: the attacks on infrastructure especially cyber warfare is extremely active and, crucially, direct. It is totally fair to say that in a digital context, Russia is absolutely at war with Europe. As far as I can tell, they don’t even try to hide it.

The cold war never ended

...for Putin

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#58
post #32

Earlier quoted context omitted.

Then you're missing the point. If they succeed they may well not be reversible. The question is if this had succeeded would we have shrugged it off again or responded appropriately?

Can you give some examples of? I can imagine that under the right circumstances you might succeed in blowing up some transformers or even a turbine, but it seems like you’d be up to speed within a month or two on the outside? Or am I missing the gravity somehow?

I've seen less-than-credible software in an ATM and in a "ring up your own groceries" station. No idea who's behind it or who would care, though.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#59
post #35

Earlier quoted context omitted.

I was not speaking to just one case. Today's incident, is _the norm_. These attacks are widespread, damaging, and the repercussions are felt for decades in their wake. We _are_ being carpet bombed, and the costs for the victims are ongoing and growing. The collateral damage is everywhere. Do you really think there's no impact? > Cyber units from at least one nation state routinely try to explore and exploit Australia…

[flagged]

I guess I shouldn't be drawn by someone calling me an idiot...

But one last try.

You suggested that the cost of cyberattacks on industry, is not so great as when we were destroying it with bombs instead.

However, every time we have power outages, people die. Then we have the cost of securing the infrastructure. And the cost of everyone else affected, who has to increase their resilience.

Your bank is collateral damage, as is the people freezing to death in their homes. Entire industries are on the verge of collapse - getting a new turbine to help stabilise your grid has a lead time of _years_, not days or weeks. And if you hit weeks, people die.

Insurance responds to attacks, and that trickles out to everywhere that is touched. VISA and MasterCard have to prepare for eventualities, because of attacks not aimed at them, but at power infrastructure.

When power is hit... There is nothing unaffected.

Volt Typhoon hit the US power grid, and required a massive multinational effort to extract them, that took almost a year... And VT wasn't intended to do damage, just look for weak spots. So that next time, they can cause damage. As part of that survival process, various hardware partners were kicked to the curb, and the repercussions are still in the process of being felt. Half the industry may have issues surviving because of it.

Industroyer is one of the reasons that Kyiv got as bad as it did. Malware is not some hand-wave and fix thing. Half the city's relays were permanently damaged.

Then of course, there was Stuxnet. Which blew up centrifuges, and the research centres hit are still trying to recover from where they were, then.

Cyberattacks are a weapon of war, people die, industries die, and there is no easy path to recovery following it.

An entire industry exists, just to defend against these kinds of attacks. The money spent on that, is counted, which means it has to be less than the cost of the attack succeeding. Trillions are spent, because there is absolute weight behind surviving these attacks.

If things were easier, it'd be an industry solely focused on backups and flipping a switch. But it's not.

Re: Poland's energy grid was targeted by never-before-seen wiper malware

#60
The Jaguar hack cost the UK $2.5Bn and dropped production to levels you'd normally only see during open warfare. Recovery took many months, and the financial damage persists today.

We still operate with a primitive homunculi where a gunshot is considered aggressive, but sabotaging infrastructure that can kill hundreds from cold is being waved at.

Post reply on HN