--- title: Tug owners warned after first detected cyber attack description: Tug owners were warned to be vigilant for cyber attacks and malware after a tug in the US was targeted image: https://channel16.dryadglobal.com/hubfs/Cybersecurity-for-ships.jpg --- ###### 2 min read # Tug owners warned after first detected cyber attack By: [ Dryad Global ](https://channel16.dryadglobal.com/archive/author/dryad-global) on September 15, 2020 at 11:24 AM [Cyber Security](https://channel16.dryadglobal.com/archive/tag/cyber-security) [Security](https://channel16.dryadglobal.com/archive/tag/security) [Industry News](https://channel16.dryadglobal.com/archive/tag/industry-news) - [**](https://twitter.com/GlobalDryad) - [**](https://www.linkedin.com/company/dryad-global/) - [**](https://www.youtube.com/channel/UCZSIjPkeq7iDcsj4r9TF9mg?sub_confirmation=1) ![Featured Image](https://channel16.dryadglobal.com/hubfs/Cybersecurity-for-ships.jpg) Tug owners were warned to be vigilant for cyber attacks and malware after a tug in the US was targeted. Towage vessels and their crews are increasingly connected to online services during operations, increasing their vulnerability to cyber threats, malware, viruses and hackers. These concerns were raised by the Maritime Transportation System (MTS) - Information Sharing and Analysis Center (ISAC) in the US after a tug was the victim of a phishing email. This was the first time a tug reported receiving this type of phishing email, according to MTS-ISAC, which advised the whole maritime industry of the dangers of cyber attacks during Riviera Maritime Media’s [*Where port security meets cyber security *](https://www.rivieramm.com/webinar-library/cyber-security/where-port-security-meets--cyber--security)webinar in August. Its cyber security advisory said a tug operating organisation received the phishing email with a voicemail-themed attachment, then notified Louisiana InfraGard of the cyber threat, which notified MTS-ISAC. This malware email spoofed the vessel operator as the sender and was sent to the tug with an Office 365 eVoiceMail Express-themed attachment. MTS-ISAC analysed the offending email, headers and the attachment. It discovered one of the HTTP (hypertext transfer protocol) requests received a 404 (not found) message and the other was not flagged as malicious when examined. However, besides spoofing the vessel operator as the sender, the MTS-ISAC noticed that the email subject line used three different fonts, which may be an indicator that similar emails were sent to other prospective victims by replacing parts of the subject line text. The sending IP address, which was geolocating to Germany, was associated with spam and phishing by multiple open source intelligence reports since June. MTS-ISAC has asked other organisation to contact them if they receive similar activity through this link [www.mtsisac.org/contact](https://www.mtsisac.org/contact) It hopes its advisory increases tug operators’ situational knowledge and heightens their awareness of these cyber threats to their vessels and people. MTS-ISAC explained some of the best practices to counter malicious email attacks in its advisory. Tug operators should provide regular email awareness training to employees, including how to handle links and attachments in emails, and help them understand how to identify and report suspicious emails to a security team. Owners of towage vessels may need to implement additional email security technologies and tools to detect and filter spam and phishing attacks. Report suspicious activity for further analysis, trending and reporting to the maritime community, through the MTS-ISAC. During Riviera’s Maritime Cyber Security Webinar Week in August, MTS-ISAC executive director Scott Dickerson explained [how ports and ship operators can secure their assets](https://www.rivieramm.com/news-content-hub/compliance-does-not-equal-security-or-effective-risk-management-60830) from cyber threats. He advised maritime organisations to be vigilant to the cyber threats to their assets. “Every organisation should understand their IT, operational technology and the risks to revenue generation and business models,” said Mr Dickerson, “and manage each risk to within the defined acceptable limits of the organisation.” Published by [Riviera Media](https://www.rivieramm.com/news-content-hub/tug-owners-warned-after-first-detected-cyber-attack-60905) 15 Sep 2020by Martyn Wingrove ###### Share article [![Share on Facebook](https://channel16.dryadglobal.com/hs-fs/hubfs/Drayad_DMP21/Images/fb.png?width=24&name=fb.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://channel16.dryadglobal.com/hs-fs/hubfs/Drayad_DMP21/Images/linkedin.png?width=24&name=linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://channel16.dryadglobal.com/hs-fs/hubfs/Drayad_DMP21/Images/twitter.png?width=24&name=twitter.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Tug%20owners%20warned%20after%20first%20detected%20cyber%20attack) [![Share on Pinterest](https://channel16.dryadglobal.com/hs-fs/hubfs/Drayad_DMP21/Images/pinterest.png?width=24&name=pinterest.png)](http://pinterest.com/pin/create/button/?url=https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Dpinterest&media=https%3A%2F%2Ff.hubspotusercontent40.net%2Fhubfs%2F4795492%2FDrayad_DMP21%2FImages%2Fpinterest.png) [![Share on Email](https://channel16.dryadglobal.com/hs-fs/hubfs/Drayad_DMP21/Images/mail.png?width=24&name=mail.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fchannel16.dryadglobal.com%2Farchive%2Ftug-owners-warned-after-first-detected-cyber-attack%3Futm_medium%3Dsocial%26utm_source%3Demail) #### Related Posts ### [Suspicious Vessel - 233nm South Lomé THE IMB PRC RECEIVED THE FOLLOWING INFORMATION FROM ECOWAS MMCC ZONE F.](https://channel16.dryadglobal.com/archive/suspicious-vessel-233nm-south-lome) ### [Haftar's spokesman: We're at war with Turkey The spokesman for Khalifa Haftar's forces Ahmed Al-Mismari said they are at war with Turkey after..](https://channel16.dryadglobal.com/archive/print-a-a-haftars-spokesman-were-at-war-with-turkey) ### [The pros and cons of Turkey’s presence in West.. The Turkish parliament this week approved an extension of the mandate for naval troop deployment in..](https://channel16.dryadglobal.com/archive/pros-and-cons-of-turkeys-presence-in-west-africa-and-the-sahel) ##### Twitter Feeds Twitter Feeds [Follow @GlobalDryad](https://twitter.com/GlobalDryad?ref_src=twsrc%5Etfw)   ##### Channel 16 Channel 16 ###### [Cross-Strait relations in the Lai era](https://channel16.dryadglobal.com/archive/cross-strait-relations-in-the-lai-era) On May 20, Lai Ching-te was inaugurated as Taiwan's new president, prompting significant military... ##### Know More Know More ##### Reach Us Reach Us Press/media contact [Email Us](mailto:press@dryadglobal.com) General Enquiries [Contact Us Here](https://share.hsforms.com/1nNmumgLKRy6b7zdktrR3FQ2us84) [![DG Logo Horizontal NEW White](https://channel16.dryadglobal.com/hs-fs/hubfs/Branding/DG%20Logo%20Horizontal%20NEW%20White.png?width=280&height=100&name=DG%20Logo%20Horizontal%20NEW%20White.png "DG Logo Horizontal NEW White")](https://dryadglobal.com) © 2024 Dryad Global. All Rights Reserved [**](https://twitter.com/GlobalDryad)[**](https://www.linkedin.com/company/dryad-global/)[**](https://www.youtube.com/c/IMSAGlobalDryad) ** ![](https://px.ads.linkedin.com/collect/?pid=1152100&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Dryad Global", "url" : "https://channel16.dryadglobal.com/archive/author/dryad-global" }, "dateModified" : "2020-09-17T19:36:14.085Z", "datePublished" : "2020-09-15T10:24:20.000Z", "headline" : "Tug owners warned after first detected cyber attack", "image" : [ "https://channel16.dryadglobal.com/hubfs/Cybersecurity-for-ships.jpg" ], "mainEntityOfPage" : { "@id" : "https://channel16.dryadglobal.com/archive/tug-owners-warned-after-first-detected-cyber-attack", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://channel16.dryadglobal.com/hubfs/DG%20Logo%20Featured%20Image%20Green.png" }, "name" : "Dryad Global Ltd" } } ``` ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "contentUrl" : "https://4795492.fs1.hubspotusercontent-na1.net/hubfs/4795492/Gulf%20of%20Guinea%20incidents%20as%20at%20310121.mp4", "dateModified" : "2024-06-06T08:38:51.556Z", "description" : "", "duration" : "PT4.8S", "height" : 900, "name" : "Gulf of Guinea incidents as at 310121", "thumbnailUrl" : "https://4795492.fs1.hubspotusercontent-na1.net/hubfs/4795492/Gulf%20of%20Guinea%20incidents%20as%20at%20310121.mp4/medium.jpg?t=1717663131556", "uploadDate" : "2021-01-31T22:37:02.814Z", "width" : 1600 } ```