The accelerated advance in information and communication technologies in the modern world that has driven the interconnectivity of the world —from people to markets— and has greatly facilitated communication, real-time monitoring and automation, also has its risks.
In the last five years, according to the Global Risks Report of the World Economic Forum, cyberattacks, data theft and electronic fraud have become a risk with a high probability of occurrence and no industry, including the energy industry, is safe.
Perhaps you remember, in 2019 Pemex suffered a cyberattack called ransomware, which basically is a play on words to say something like kidnapping or ransom app. The fact is that a group of hackers found a vulnerability in Pemex’s outgoing connections; those digital ports that equipment uses to connect to YouTube, Netflix or even the internet.
Well then, once access to the company’s internal network was gained, the malicious software began to do its job: encrypt all the files in the company’s internal cloud. That is, it established a lock on the file system and they can only be unlocked with a complex string. All the files. From emails to official documents and databases.
It is estimated that the ransom requested from Pemex was close to 5 million dollars in cryptocurrencies, which makes it very difficult to track the perpetrators. However, according to statements from Mexico’s oil company, the ransom was not paid and some systems took several months to be completely restored.
Cyberattacks Recently Affected the Price of Gasoline in the United States
A couple of weeks ago another company, now in the United States, that operates the main refined-products transport pipeline from the Gulf of Mexico to the East Coast of the country, was attacked. The Colonial pipeline is made up of almost 9,000 kilometers in length and transports 2.5 million barrels per day. As a result of the cyberattack, the pipeline lasted five days out of service.
This put gasoline prices in the United States in trouble, which registered their most important increase since 2014, when the international fall in oil prices began. Some news sites even reported panic buying by American motorists who filled gallons, water tanks and even plastic bags.
At first, Colonial decided not to pay the ransom; however, due to these pressures the company gave in and ended up paying around 5 million dollars. The same amount that was requested from Pemex at the beginning.
If we consider what was indicated by the World Economic Forum, this type of risk will become more common every day and the ransoms higher every day. Companies allocate a large part of their income to increase their cybersecurity and hackers will dedicate more and more resources to maintaining attacks because they constitute an opportunity to make good money.
A solution that companies such as Google, Sony or Microsoft have implemented is to create reward programs for hackers who use the platform to report vulnerabilities in the security of their systems in exchange for a payment. With this, companies get ahead and can block latent failures. This is putting the community to work with a common objective.
In Mexico, in the energy sector, it would be necessary to ask about the state of the security of Cenace, Cenagas; CFE or Pemex itself, because an attack like these could happen again at any moment. Even in our homes: can you imagine someone hacking Alexa or putting your computer to mine bitcoin? Or, in the future, can you imagine someone hacking the robot that delivers pizzas?
Without a doubt, this is one of the risks of a future interconnected in real time throughout the globe.
This article was originally published by Business Insider México.
Date: May 18, 2021
Original Link: https://businessinsider.mx/preparemonos-ciberataques-industria-electrica-energia-circular-paul-alejandro-sanchez/ [offline]
Archived Link: https://web.archive.org/web/20210619041707/https://businessinsider.mx/preparemonos-ciberataques-industria-electrica-energia-circular-paul-alejandro-sanchez/ [Archived]


