Maritime Computer Emergency Response Team ADMIRAL dataset ADMIRAL dataset

Publicly disclosed information for this event

Index Number:
Title:
2006_001
Intrusion on a naval website.
Day Month Year Country Activity Incident Type
6 November 2006 United States Defence Intrusion

Summary

The victim, recognized as the nation's premier center for strategic thought and national security policy development for the Navy, serves a diverse student body. The institution has 581 students, including officers from various military branches such as the Army, Air Force, Coast Guard and Marines, as well as civilians and international attendees.

According to sources, around November 16, an intrusion into the computer network at a renowned naval academic institution was detected by the Navy Cyber Defense Operations Command. The compromised system, primarily used by the institution's students, was unclassified.

In response to the breach, the institution's network, including its email and website, has been offline for over two weeks. While the exact timeline for its restoration remains uncertain, measures were taken to enhance the network's defenses, including upgrading firewalls. An investigation was conducted to determine the full extent of the intrusion, with officials abstaining from speculating on potential suspects.

Victim

US Naval War College

Claimed/Reported Threat Actor

N/A

Origin

Undisclosed

Main impact

Availability

References

Recommendations to Defence to reduce Intrusion risks:

  • Implement strong access controls and authentication mechanisms to limit unauthorized access, such as Multi Factor Authentication.
  • Regularly update and patch software and systems to address known vulnerabilities.
  • Use Network Intrusion Detection Systems (NIDS) to monitor and block suspicious activities.
  • Segment your network to limit lateral movement by attackers in case of a breach.
  • Educate your employees about phishing attacks and social engineering tactics to prevent credential theft.
Previous Next
Disclaimer: the data are provided as is. France Cyber Maritime and the M-CERT take no responsibility for the soundness, quality, precision, nor the eventual attribution made by the referenced URLs. We give a lot of respect and support to the victims of attacks.
Files generated on Monday, 11th December 2023.
ADMIRAL is licensed under the Creative Commons CC-BY-NC license. Copyright © France Cyber Maritime 2023.