Norwegian Sailors Sound a Warning About Cyberattacks on the High Seas

Researchers with seafaring backgrounds are sounding the alarm about cyberattacks on ships and the catastrophic outcomes compromised floating computers present. While no official incidents have been reported, there have been many strange, unexplainable events occurring to ships recently. Cyberattacks on the supply chain and shipping industry have become common, as they’re valuable targets for both financial and geopolitical purposes. Thus, ships themselves pose a significant risk, given that their inherent role in shipping and supply make them critical targets, with additional escalatory risks for those working in energy, oil, gas, agriculture and more. Some suspected attacks include jamming of ships’ GPS causing unintentional entry into unauthorized waters, spoofing AIS (automated identification system) broadcasts of one ship’s signal to the location of another ship, or potentially hacking the rudder on a ship to make it run aground. The scarcity of publicly acknowledged cyberattacks at sea doesn’t necessarily point to the absences of cyberattacks but rather to the lack of official reporting in the shipping industry, where crew members handle these suspected cyberattacks the same as they would a typical maritime technical issue. Researchers at the Norwegian University of Science and Technology (NTNU) want to bring awareness to ship owners, their crews, and seafarers at large about the real-world implications that cyberattacks could have on ships while highlighting how a ship’s Operational Technology (OT) and Information Technology (IT) are highly connected, meaning malware to the IT directly affects the OT. Maritime security and IT personnel should be prepared to handle the physical consequences that can arise from compromised IT and strengthen their ship’s security to further deter hackers.