Journal is indexed in following databases:
- SCOPUS
- Web of Science Core Collection - Journal Citation Reports
- EBSCOhost
- Directory of Open Access Journals
- TRID Database - Transportation Research Board
- Index Copernicus Journals Master List
- BazTech
- Google Scholar
2023 Journal Impact Factor - 0.7
2023 CiteScore - 1.4
ISSN 2083-6473
ISSN 2083-6481 (electronic version)
Editor-in-Chief
Associate Editor
Prof. Tomasz Neumann
Published by
TransNav, Faculty of Navigation
Gdynia Maritime University
3, John Paul II Avenue
81-345 Gdynia, POLAND
e-mail transnav@umg.edu.pl
State-Sponsored and Organized Crime Threats to Maritime Transportation Systems in the Context of the Attack on Ukraine
1 Gdynia Maritime University, Gdynia, Poland
ABSTRACT: Due to its strategic importance and vast impact on the world economy, maritime transport has become a cyber battlefield. Cybersecurity organizations across the world notice and analyze adversaries such as Bear from Russia, Panda from China, Buffalo from Vietnam, Chollima from North Korea (DPRK), and others from Columbia, India, Turkey, and Iran, as well as hacktivist and E-Crime. In 2014 - 2023, Ukraine became the object of massive cyberattacks aimed at its political, social, and economic destabilization. This situation changes the perception of cyberspace and its importance for ensuring the security of the global economy, in particular, the maritime economy. Reports published by the US Coast Guard show that. In this publication, the author reviews the cybersecurity threat landscape targeting the maritime industry and transportation systems and analyzes the technics, tactics, and procedures (TTPs) used by threat actors.
KEYWORDS: Cyber Attack, Cyber Incidents, Maritime Cyber Resilience, Cyber Resilience, Maritime Cyber Security, Maritime Cyber Threats, Cybersecurity, Advanced Persistent Threat
REFERENCES
"CrowdStrike 2023 Global Threat Report | Executive Summary," crowdstrike.com. https://www.crowdstrike.com/resources/reports/global-threat-report-executive-summary-2023/ (accessed June 14, 2023).
"M-Trends 2022: Cyber Security Metrics, Insights and Guidance From the Frontlines," Mandiant. https://www.mandiant.com/resources/blog/m-trends-2022 (accessed June 14, 2023).
K. Monica, S. James, and S. Max, "The Cyber Operations during the 2022 Russian invasion of Ukraine: Lessons Learned (so far)," Jul. 2022. [Online]. Available: https://eccri.eu/wp-content/uploads/2022/07/ECCRI_WorkshopReport_Version-Online.pdf
"2021 Cyber Trends and Insights in the Marine Environment (CTIME) Report," Aug. 2022. Accessed: June 14, 2023. [Online]. Available: https://safety4sea.com/uscg-cyber-trends-and-insights-in-the-marine-environment/
B. Svilicic, K. Junzo, M. Rooks, and Y. Yano, "Maritime Cyber Risk Management: An Experimental Ship Assessment," J. Navig., vol. 72, pp. 1–13, Feb. 2019, doi: 10.1017/S0373463318001157. - doi:10.1017/S0373463318001157
M. Maynes, "One simple action you can take to prevent 99.9 percent of attacks on your accounts," Microsoft Security Blog, August 20, 2019. https://www.microsoft.com/en-us/security/blog/2019/08/20/one-simple-action-you-can-take-to-prevent-99-9-percent-of-account-attacks/ (accessed June 14, 2023).
D. Freeze, "Multi-Factor Authentication Is (Not) 99 Percent Effective," Cybercrime Magazine, February 23, 2023. https://cybersecurityventures.com/multi-factor-authentication-is-not-99-percent-effective/ (accessed June 14, 2023).
"Hacking Two Factor Authentication: Four Methods for Bypassing 2FA and MFA – The CISO Perspective," January 13, 2022. https://cisoperspective.com/index.php/2022/01/13/hacking-two-factor-authentication-four-methods-for-bypassing-2fa-and-mfa/ (accessed June 14, 2023).
“CVE - CVE-2021-32648.” https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32648 (accessed June 14, 2023).
Editorial, "Ukraine banking and defense platforms knocked out amid heightened tensions with Russia," NetBlocks, February 15, 2022. https://netblocks.org/reports/ukraine-banking-and-defence-platforms-knocked-out-russia-conflict-JBQX7mAo (accessed June 14, 2023).
https://news.viasat.com/viasat, "KA-SAT Network cyber attack overview," viasat.com, March 30, 2022. https://news.viasat.com/blog/corporate/ka-sat-network-cyber-attack-overview (accessed June 14, 2023).
"2022 Ukraine cyberattacks," Wikipedia. May 04, 2023. Accessed: June 14, 2023. [Online]. Available: https://en.wikipedia.org/w/index.php?title=2022_Ukraine_cyberattacks&oldid=1153205698
State of the Hack: One Year after the APT1 Report, (February 28, 2014). Accessed: June 14, 2023. [Online Video]. Available: https://www.youtube.com/watch?v=88o-uifbJSE
“Internet Crime Complaint Center(IC3) | Annual Reports.” https://www.ic3.gov/Home/AnnualReports (accessed June 14, 2023).
Coast Guard Cyber Command, "2022 Cyber Trends and Insights in the Marine Environment (CTIME) Report," United States Coast Guard, May 2023. [Online]. Available: https://www.uscg.mil/Portals/0/Images/cyber/2022CTIMEReport_Final.pdf?ver=lFYiLZqt4dbVf2RFTgL15g%3d%3d×tamp=1685643398263
A. Ajdin, "Hapag-Lloyd flags spear phishing attack," Splash247, March 08, 2022. https://splash247.com/hapag-lloyd-flags-spear-phishing-attack/ (accessed June 15, 2023).
"Phishing impersonates shipping giant Maersk to push STRRAT malware," BleepingComputer. https://www.bleepingcomputer.com/news/security/phishing-impersonates-shipping-giant-maersk-to-push-strrat-malware/ (accessed June 15, 2023).
"Cyberattack Threatens Release of Port of Lisbon Data," The Maritime Executive. https://maritime-executive.com/article/cyberattack-threatens-release-of-port-of-lisbon-data (accessed June 15, 2023).
"Voyager Worldwide hit by cyber attack - Splash247." https://splash247.com/voyager-worldwide-hit-by-cyber-attack/ (accessed June 15, 2023).
Unit 42, "2022 Unit 42 Ransomware Threat Report Highlights: Ransomware Remains a Headliner," Unit 42, March 24, 2022. https://unit42.paloaltonetworks.com/2022-ransomware-threat-report-highlights/ (accessed June 14, 2023).
"Cyber-SHIP Lab Annual Symposium," University of Plymouth, November 01, 2023. https://www.plymouth.ac.uk/whats-on/cyber-ship-lab-annual-symposium (accessed June 16, 2023).
"Ever Given," Wikipedia. May 31, 2023. Accessed: June 16, 2023. [Online]. Available: https://en.wikipedia.org/w/index.php?title=Ever_Given&oldid=1157809412
"Ransomware attack on maritime software impacts 1,000 ships." https://therecord.media/ransomware-attack-on-maritime-software-impacts-1000-ships (accessed June 14, 2023).
S. Lyngaas, "Hackers breached computer network at key US port but did not disrupt operations | CNN Politics," CNN, September 23, 2021. https://www.cnn.com/2021/09/23/politics/suspected-foreign-hack-houston/index.html (accessed June 14, 2023).
"Spoofing in the Black Sea: What really happened?," GPS World, October 11, 2017. https://www.gpsworld.com/spoofing-in-the-black-sea-what-really-happened/ (accessed June 12, 2023).
"GPS freaking out? Maybe you're too close to Putin," NRKbeta, September 18, 2017. https://nrkbeta.no/2017/09/18/gps-freaking-out-maybe-youre-too-close-to-putin/ (accessed June 12, 2023).
T. Neumann (2017). Automotive and telematics transportation systems. Paper presented at the 2017 International Siberian Conference on Control and Communications, SIBCON 2017 - Proceedings, doi:10.1109/SIBCON.2017.7998555 - doi:10.1109/SIBCON.2017.7998555
A. Weintrit, T. Neumann (2019). Advances in marine navigation and safety of sea transportation. introduction. Advances in Marine Navigation and Safety of Sea Transportation - 13th International Conference on Marine Navigation and Safety of Sea Transportation, TransNav 2019.
Citation note:
Cichocki R.: State-Sponsored and Organized Crime Threats to Maritime Transportation Systems in the Context of the Attack on Ukraine. TransNav, the International Journal on Marine Navigation and Safety of Sea Transportation, Vol. 17, No. 3, doi:10.12716/1001.17.03.24, pp. 717-721, 2023
Authors in other databases:
Rafał Cichocki:
orcid.org/0000-0002-5004-5587
orcid.org/0000-0002-5004-5587
File downloaded 177 times
