As online shopping has become more popular, cybersecurity professionals and enthusiasts have become increasingly concerned about malware, scam websites and other problems that could cause people to make unsafe transactions. However, maritime cybersecurity is a less commonly discussed topic, which could be a drastic oversight.
After all, if cybercriminals target the ships transporting goods across the world’s waters, such issues could have massive commerce-related effects. What are some of the biggest cybersecurity threats to the maritime industry, and more importantly, how can professionals safeguard against them?
1. Insufficient Investment
Cybercriminals often target entities perceived as inadequately prepared for attacks or enterprises for which the associated disruptions are particularly severe and damaging to operations. These realities are why small businesses, nonprofits and others with fewer resources frequently suffer attacks, as do hospitals.
Research suggests the maritime industry is not ready to defend against attacks either. A 2023 study indicated only 40% of respondents thought their organizations had sufficiently invested in cybersecurity. Additionally, those polled ranked inadequate funding as the second-biggest barrier to improving the matter.
However, there were some positive takeaways, too. One was that 75% of survey participants believed securing operational technology was a bigger priority for its workplaces presently than two years ago. At the same time, only one in three respondents believed their operational technology and information technology infrastructure were equally well secured.
Those taking part in the survey had also thought about the ramifications of cyberattacks in the maritime industry. Seventy-six percent believed such events would close strategic waterways, while 68% believed cyberattacks would ground ships and 60% anticipated ship collisions.
Addressing the Challenges
Organizations can become more proactive about reducing these challenges by committing to allocating enough resources to improve defenses. A smart strategy is to assess the current cybersecurity situation, paying close attention to gaps and where the company already adheres to best practices.
Predicting the future is impossible, but those involved with enhancing maritime cybersecurity should become as proactive as possible, positioning their brands as well-equipped against future issues. Following well-established frameworks and having professional audits conducted can reveal the best areas to increase investments for the most impactful outcomes. Additionally, creating a plan to increase investments by specific amounts over several years can make the necessary budgetary allocations more feasible by giving decision-makers time to reduce their spending elsewhere.
2. Ransomware Attacks
Maritime security has improved in many ways, partially due to the increased visibility offered by options such as underwater drones. Some models have 270-degree camera sweep and 180-degree pitch angle capabilities, allowing users to see threats they may otherwise miss. However, dangers still occur over internet-enabled networks. Ransomware attacks are excellent examples, particularly since they can make whole infrastructures and all the devices using them inoperable.
Cyberattackers lock affected networks and demand victims pay specified ransoms. However, their cooperation does not guarantee access restoration. Unfortunately, people working at unprepared organizations often believe there is no other option but to pay and hope for the best.
An alternative is to have essential files fully and regularly backed up. Then, if ransomware attacks occur, their effects are minimal and will not result in information loss.
According to a 2023 report, the average maritime industry cyberattack costs $550,000 for the targeted entity — significantly more than the 2022 average of $182,000. Additionally, the research revealed a 350% increase in ransom demand amounts, with totals reaching $3.2 million on average. Another finding was that nearly a quarter of respondents fell for tricks that convinced them to transfer funds to criminal groups.
Unfortunately, this research continued to show a theme of underinvestment, as a third of respondents said they spend less than $100,000 annually on cybersecurity management. Relatedly, 25% lack risk insurance coverage, making them unable to rely on it if ransomware attacks occur.
Addressing the Challenges
The best ways to tackle ransomware-related challenges are to keep data backed up and get adequate insurance for such attacks. Ransomware is becoming more common, but when targeted businesses keep copies of essential data, these incidents are less impactful.
Additionally, decision-makers should create thorough plans for how to react during ransomware attacks. Which parties get contacted first? Does the company have policies that forbid engaging with criminals? Developing a detailed strategy that includes which parties will fulfill specific responsibilities afterward prevents misunderstandings and could reduce the overall time and expenses of these incidents.
3. Phishing
Email platforms are one of the most life-changing modern conveniences, especially when communications involve urgent corporate needs. However, even though sending a message is a speedy option for keeping in touch, it can also create cyber risks. These primarily occur as phishing attacks, where malicious parties impersonate legitimate senders.
Data from 2023 shows more than 45 million emails posed high-risk threats that year. Additionally, 25 million of those messages contained phishing URLs or otherwise dangerous links. Maritime operations have far-reaching effects, with employees often communicating with parties worldwide. Email makes exchanging documents and other specifics simple, but people must also avoid falling for tactics that could lead to successful phishing attacks.
In July 2024, threat researchers published their latest findings associated with a nation-state threat actor’s attempts to target ports and maritime facilities in the Mediterranean Sea and Indian Ocean. The efforts began once someone from a targeted brand received a phishing email that seemingly contained a legitimate document and came from a sender already known to the recipient. Those studying this phishing campaign said some messages contained details of specific ports or maritime authorities, making the content seem genuine.
Additionally, the cybersecurity research team found that criminals use three decoys to distract victims and make them less likely to detect phishing attempts. Namely, some subject lines mentioned salary cuts or job terminations, crafted to induce anxiety and encourage the recipient to click without thinking.
All the malicious documents in this campaign gain access to the target system through a remote template injection technique. Since a patch for this known vulnerability has existed since 2017, the researchers believe attackers hope their victims have not taken the time to update their systems, making the breach still available to exploit.
Addressing the Challenges
Phishing attacks are increasingly common, but cautiousness is one of the most practical defenses against them. Malicious emails often demand urgent action, usually to avoid unwanted consequences. For example, a recipient might see a message saying they must transfer a large sum of money within the next hour to secure a lucrative contract. The scammer’s goal is to limit the time the person has to consider the situation and determine if anything seems suspicious about it.
Training workers to think before acting can significantly reduce their chances of becoming phishing attack victims. Additionally, teach them to avoid engaging with phishing perpetrators. The wisest alternative is to contact the supposed sender through a method other than email.
For example, contacting the party through a phone number on the organization’s official website would eliminate further engagement with potential criminals. Email- and attachment-screening methods are also valuable for catching phishing messages before they reach recipients’ inboxes.
Staff should have reporting mechanisms for flagging suspicious messages. That way, the cybersecurity team can track trends and determine whether phishing is becoming more prevalent or problematic.
Maritime Cybersecurity Challenges Are Conquerable
Although the maritime industry has numerous concerning cybersecurity developments and risks, they are not impossible to overcome. The actionable strategies above will keep decision-makers prepared and aware.
As the Features Editor at ReHack, Zac Amos writes about cybersecurity, artificial intelligence, and other tech topics. He is a frequent contributor to Brilliance Security Magazine.
.
.
Follow Brilliance Security Magazine on Twitter and LinkedIn to ensure you receive alerts for the most up-to-date security and cybersecurity news and information.