<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Franklin Gothic Book";
panose-1:2 11 5 3 2 1 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-name:"List Paragraph\,Dot pt\,F5 List Paragraph\,List Paragraph1\,No Spacing1\,List Paragraph Char Char Char\,Indicator Text\,Colorful List - Accent 11\,Numbered Para 1\,Bullet 1\,Bullet Points\,List Paragraph2\,MAIN CONTENT\,Normal numbered\,Issue Action POC\,3\,Bullet\,F5\,\5217";
mso-style-priority:34;
mso-style-link:"List Paragraph Char\,Dot pt Char\,F5 List Paragraph Char\,List Paragraph1 Char\,No Spacing1 Char\,List Paragraph Char Char Char Char\,Indicator Text Char\,Colorful List - Accent 11 Char\,Numbered Para 1 Char\,Bullet 1 Char\,Bullet Points Char\,List Paragraph2 Char";
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-name:"List Paragraph\,Dot pt\,F5 List Paragraph\,List Paragraph1\,No Spacing1\,List Paragraph Char Char Char\,Indicator Text\,Colorful List - Accent 11\,Numbered Para 1\,Bullet 1\,Bullet Points\,List Paragraph2\,MAIN CONTENT\,Normal numbered\,Issue Action POC\,3\,Bullet\,F5\,\5217Cx";
mso-style-priority:34;
mso-style-link:"List Paragraph Char\,Dot pt Char\,F5 List Paragraph Char\,List Paragraph1 Char\,No Spacing1 Char\,List Paragraph Char Char Char Char\,Indicator Text Char\,Colorful List - Accent 11 Char\,Numbered Para 1 Char\,Bullet 1 Char\,Bullet Points Char\,List Paragraph2 Char";
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-name:"List Paragraph\,Dot pt\,F5 List Paragraph\,List Paragraph1\,No Spacing1\,List Paragraph Char Char Char\,Indicator Text\,Colorful List - Accent 11\,Numbered Para 1\,Bullet 1\,Bullet Points\,List Paragraph2\,MAIN CONTENT\,Normal numbered\,Issue Action POC\,3\,Bullet\,F5\,\5217Cx";
mso-style-priority:34;
mso-style-link:"List Paragraph Char\,Dot pt Char\,F5 List Paragraph Char\,List Paragraph1 Char\,No Spacing1 Char\,List Paragraph Char Char Char Char\,Indicator Text Char\,Colorful List - Accent 11 Char\,Numbered Para 1 Char\,Bullet 1 Char\,Bullet Points Char\,List Paragraph2 Char";
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-name:"List Paragraph\,Dot pt\,F5 List Paragraph\,List Paragraph1\,No Spacing1\,List Paragraph Char Char Char\,Indicator Text\,Colorful List - Accent 11\,Numbered Para 1\,Bullet 1\,Bullet Points\,List Paragraph2\,MAIN CONTENT\,Normal numbered\,Issue Action POC\,3\,Bullet\,F5\,\5217Cx";
mso-style-priority:34;
mso-style-link:"List Paragraph Char\,Dot pt Char\,F5 List Paragraph Char\,List Paragraph1 Char\,No Spacing1 Char\,List Paragraph Char Char Char Char\,Indicator Text Char\,Colorful List - Accent 11 Char\,Numbered Para 1 Char\,Bullet 1 Char\,Bullet Points Char\,List Paragraph2 Char";
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
mso-add-space:auto;
font-size:10.0pt;
font-family:"Calibri",sans-serif;}
span.ListParagraphChar
{mso-style-name:"List Paragraph Char\,Dot pt Char\,F5 List Paragraph Char\,List Paragraph1 Char\,No Spacing1 Char\,List Paragraph Char Char Char Char\,Indicator Text Char\,Colorful List - Accent 11 Char\,Numbered Para 1 Char\,Bullet 1 Char\,Bullet Points Char\,List Paragraph2 Char";
mso-style-priority:34;
mso-style-link:"List Paragraph\,Dot pt\,F5 List Paragraph\,List Paragraph1\,No Spacing1\,List Paragraph Char Char Char\,Indicator Text\,Colorful List - Accent 11\,Numbered Para 1\,Bullet 1\,Bullet Points\,List Paragraph2\,MAIN CONTENT\,Normal numbered\,Issue Action POC\,3\,Bullet\,F5\,\5217";
font-family:"Calibri",sans-serif;}
p.paragraph, li.paragraph, div.paragraph
{mso-style-name:paragraph;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1654678271;
mso-list-template-ids:793957018;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1
{mso-list-id:2066101265;
mso-list-type:hybrid;
mso-list-template-ids:1802128958 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">FYSA<o:p></o:p></p>
<p class="paragraph" style="mso-margin-top-alt:0in;margin-right:3.0pt;margin-bottom:0in;margin-left:0in;vertical-align:baseline">
<o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:6.0pt"><span style="font-family:"Franklin Gothic Book",sans-serif">The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and the Department of Energy (DOE) announced
a <a href="https://www.cisa.gov/uscert/ncas/current-activity/2022/03/24/state-sponsored-russian-cyber-actors-targeted-energy-sector-2011">
joint Cybersecurity Advisory</a> today with information on Russian state-sponsored cyber actors that conducted multiple intrusion campaigns targeting U.S. and international energy sector organizations from 2011 to 2018. This advisory is being published in conjunction
with the <a href="https://www.justice.gov/opa/pr/four-russian-government-employees-charged-two-historical-hacking-campaigns-targeting-critical">
U.S. Department of Justice announcement</a> of unsealed indictments today. <o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.0pt"><span style="font-family:"Franklin Gothic Book",sans-serif">The advisory titled, “<a href="https://www.cisa.gov/uscert/ncas/alerts/aa22-083a">Tactics, Techniques, and Procedures of Indicted State-Sponsored Russian
Cyber Actors Targeting the Energy Sector</a>,” provides the technical details about a global energy sector intrusion campaign using Havex malware, and a compromise of a Middle East-based energy sector organization using TRITON malware. In both instances, the
threat actors were also involved in activity targeting U.S. energy sector companies.<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:6.0pt"><span style="font-family:"Franklin Gothic Book",sans-serif">While this advisory documents historical cyber activity, CISA, FBI and DOE assess that state-sponsored Russian cyber operations continue to pose an
ongoing threat to U.S. Energy Sector networks. Actions that executives and leaders can take now to protect to their networks are:
<o:p></o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraphCxSpFirst" style="margin-bottom:6.0pt;margin-left:0in;mso-add-space:auto;mso-list:l1 level1 lfo3">
<span style="font-size:11.0pt;font-family:"Franklin Gothic Book",sans-serif">Implementing and ensuring robust network segmentation between information technology and industrial control systems (ICS) networks;
<o:p></o:p></span></li><li class="MsoListParagraphCxSpMiddle" style="margin-bottom:6.0pt;margin-left:0in;mso-add-space:auto;mso-list:l1 level1 lfo3">
<span style="font-size:11.0pt;font-family:"Franklin Gothic Book",sans-serif">Enforcing multifactor authentication to authenticate into a system; and
<o:p></o:p></span></li><li class="MsoListParagraphCxSpLast" style="margin-bottom:6.0pt;margin-left:0in;mso-add-space:auto;mso-list:l1 level1 lfo3">
<span style="font-size:11.0pt;font-family:"Franklin Gothic Book",sans-serif">Managing the creation of, modification of, use of, and permissions associated with privileged accounts.
<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-family:"Franklin Gothic Book",sans-serif">In addition to reviewing this new advisory, CISA encourages critical infrastructure executives and senior leaders to review our “Shields Up” webpage
at <a href="http://www.cisa.gov/shields-up">www.cisa.gov/shields-up</a>. Also, <span style="color:#030303">
organizations should report <u>incidents and unusual activity</u> to CISA 24/7 Operations Center at
</span><a href="mailto:report@cisa.gov">report@cisa.gov</a><span style="color:#030303"> or (888) 282-0870 and/or to the FBI via your local FBI field office or the FBI’s 24/7 CyWatch at (855) 292-3937 or
</span><a href="mailto:CyWatch@fbi.gov">CyWatch@fbi.gov</a><span style="color:#030303">.
<o:p></o:p></span></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:#1F497D">Theresa A. Masse<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cyber Security Advisor, Region 10 (Oregon)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Cybersecurity and Infrastructure Security Agency<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Department of Homeland Security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Phone: (503) 930-5671
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:#1F497D">Email:</span><span style="font-size:10.0pt;color:#777777">
</span><a href="mailto:theresa.masse@cisa.dhs.gov"><span style="font-size:10.0pt">theresa.masse@cisa.dhs.gov</span></a><u><span style="font-size:10.0pt;color:#0760C1"><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><img border="0" width="97" height="97" style="width:1.0138in;height:1.0138in" id="Picture_x0020_1" src="cid:image001.png@01D83F8F.D17D4270"><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>