Cyberattacks are on the rise – which companies are likely to benefit?

The US Department of Justice has recovered more than $2.3m from last month’s Colonial Pipeline hack incident, but questions persist about how the world’s largest economy – and the rest of us, for that matter – can prevent a future attack on its infrastructure systems.

On Monday, US officials announced that they had identified a virtual wallet which they suspect is related to DarkSide, the hacking group responsible for last month’s Colonial Pipeline debacle. As a result, they managed to retrieve the 63.7 bitcoin ransom, currently worth about $2.3m. 

The Colonial Pipeline, America’s largest fuel pipeline, was shut for five days after the pipeline was confronted on 7 May with a ransomware attack by Darkside. The hacking group is believed to have Russian ties. 

Once DarkSide encrypted Colonial’s data, it demanded cryptocurrency payments as ransom in exchange for giving Colonial Pipeline a decryption tool to unlock the systems that DarkSide hackers had brought to a standstill. Colonial Pipeline paid almost $5m to the hackers as a result. 

The hack was one of the worst infrastructure attacks in US history. The 5,500 mile-long pipeline which runs from Texas to America's east coast is important because it provides more than 45% of the east coast’s fuel, including home heating oil, jet fuel, petrol and diesel. 

Given the volume of fuel that flows through the pipeline, the closure unsurprisingly wrought havoc, propelling panic buying across both petrol and gas markets. 

How can the US prevent future attacks? 

The good news for Colonial is that the FBI did manage to get some of the money back. The Department of Justice is unlikely to boast of exactly how they did it. But we do know that the FBI obtained access to the “private key” belonging to the hacker’s Bitcoin wallet, according to an affidavit. Once they got the key, the FBI simply logged in with a password and diverted digital coins away from the hacker’s wallet. 

The bad news for the rest of us is that this is unlikely to be the last such cyberattack. Infrastructure in both the US and globally has already been subject to a number of high-profile attacks that extend well beyond the energy industry. 

For example, the Colonial Pipeline hack came just months after hackers broke into SolarWinds, a Texas-based company. The hackers flooded the company’s software system with malicious code, affecting up to 18,000 customers. Most recently, JBS USA, the world’s largest meat supplier, was the target of an “organised cybersecurity attack”, threatening meat supplies. 

As Forbes points out, unless companies and governments take measures to boost cybersecurity, “a future hack could target civilian infrastructure, disrupting hospital systems or the air traffic control frequencies”.

President Joe Biden’s $2trn “American Jobs Plan” has pencilled in $20bn for state, local and tribal governments to improve their energy systems and ensure they meet cybersecurity standards. The plan proposed an extra $2bn for  “grid resilience in high-risk areas that will be contingent on meeting cybersecurity targets,” reports Bloomberg. 

Basic hygiene would help a lot

But this isn’t just about increased spending. Companies need to get better at doing very simple things such as practising basic “security hygiene” to reduce the likelihood of future attacks, Philip Reiner, chief executive of nonprofit group the Institute for Security and Technology notes in The Verge. 

These include things such as ensuring multi-factor authentication is in place (whereby you are asked to verify your identity via more than one route), and that response plans are ready so that firms are prepared to cope with attacks and have robust backup systems in place. 

These measures may seem obvious, but Reiner points out that a lot of cyber crime is down to companies’ failure to practise basic security hygiene, rather than uber-intelligent hacking. Indeed, Colonial Pipeline chief executive Joseph Blount said this week that DarkSide was able to hack the system using a single password, due to a lack of multifactor authentication. 

Alternatively, as the BBC points out, the simplest way to protect operational technology from such attacks  “is to keep it offline, with no link to the internet at all”. 

The trouble is, as cybersecurity expert Jon Niccolls at IT security firm CheckPoint tells the BBC, all devices used to run a modern oil and gas pipeline are controlled by computers rather than people, and any device which is connected to an organisation’s internal network leaves the pipeline “vulnerable to malicious attacks”. 

Which cybersecurity stocks may be worth buying?

Ransomware and cybersecurity attacks are rising for a host of reasons: widespread working from home in particular makes IT systems harder to protect, while the largely anonymous nature of cryptocurrencies gives hackers a bigger incentive to conduct attacks.

Given the spate of publicity and the clear sense that this is a growing problem, you’d expect cyber stocks to have risen in recent months. Yet along with the wider tech sector, software and cybersecurity stocks have underperformed. 

Goldman Sachs was upbeat on prospects last month: “As we heard from management teams after the SolarWinds attack, we believe that most security software vendors will likely benefit from greater long-term demand and growth, as opposed to a near-term acceleration in demand,” the bank said, reports CNBC. 

Investors Daily highlights stocks including Fortinet (Nasdaq: FTNT), CrowdStrike Holdings (Nasdaq: CRWD), Proofpoint (Nasdaq: PFPT) and Palo Alto Networks (NYSE: PANW).

But if you are looking for a broad way to invest in the sector, then an exchange-traded-fund could be one way in. Most are US-based, but there are a few UK funds, including the Rize Cybersecurity Data Privacy ETF (LSE: CYBP), the Legal & General Cybersecurity ETF (LSE: ISPY), the iShares Digital Security ETF (LSE: LOCK), and the WisdomTree Cybersecurity ETF (LSE: WCBR).

Recommended

Just how green is nuclear power?
Energy

Just how green is nuclear power?

Nuclear power is certainly very clean in terms of carbon emissions, but what about the radioactive waste produced as a byproduct? It’s not as much of …
22 Jan 2022
Why GSK should turn down Unilever’s billions
UK stockmarkets

Why GSK should turn down Unilever’s billions

Unilever has offered GSK £50bn for its consumer division. But while the cash will be a temptation, the deal is not in the interests of shareholders or…
22 Jan 2022
The charts that matter: the start of the big crash?
Global Economy

The charts that matter: the start of the big crash?

US tech stocks fell further this week, more than 10% down on their November high. There’s what happened to the charts that matter most to the global e…
22 Jan 2022
Cryptocurrency roundup: authorities tighten the screw
Bitcoin & crypto

Cryptocurrency roundup: authorities tighten the screw

Saloni Sardana looks at the cryptocurrency stories that caught our eye this week.
21 Jan 2022

Most Popular

Ask for a pay rise – everyone else is
Inflation

Ask for a pay rise – everyone else is

As inflation bites and the labour market remains tight, many of the nation's employees are asking for a pay rise. Merryn Somerset Webb explains why yo…
17 Jan 2022
Temple Bar’s Ian Lance and Nick Purves: the essence of value investing
Investment strategy

Temple Bar’s Ian Lance and Nick Purves: the essence of value investing

Ian Lance and Nick Purves of the Temple Bar investment trust explain the essence of “value investing” – buying something for less than its intrinsic v…
14 Jan 2022
US inflation is at its highest since 1982. Why aren’t markets panicking?
Inflation

US inflation is at its highest since 1982. Why aren’t markets panicking?

US inflation is at 7% – the last time it was this high interest rates were at 14%. But instead of panicking, markets just shrugged. John Stepek explai…
13 Jan 2022