Shows & Panels
- The 2014 Big Picture on Cyber Security
- AFCEA Answers
- Ask the CIO
- Building the Hybrid Cloud
- Connected Government: How to Build and Procure Network Services for the Future
- Continuing Diagnostics and Mitigation: Discussion of Progress and Next Steps
- Federal Executive Forum
- Federal Tech Talk
- The Future of Government Data Centers
- The Future of IT: How CIOs Can Enable the Service-Oriented Enterprise
- Government Perspectives on Mobility and the Cloud
- The Intersection: Where Technology Meets Transformation
- Maximizing ROI Through Data Center Consolidation
- Mitigating Insider Threats in Virtual & Cloud Environments
- Modern Mission Critical Series
- Moving to the Cloud. What's the best approach for me
- Navigating Tough Choices in Government Cloud Computing
- The New Generation of Database
- Reimagining the Next Generation of Government
- Satellite Communications: Acquiring SATCOM in Tight Times
- Targeting Advanced Threats: Proven Methods from Detection through Remediation
- Transformative Technology: Desktop Virtualization in Government
- The Truth About IT Opex and Software Defined Networking
- Value of Health IT
- Air Traffic Management Transformation Report
- Cloud First Report
- General Dynamics IT Enterprise Center
- Gov Cloud Minute
- Government in Technology Series
- Homeland Security Cybersecurity Market Report
- National Cybersecurity Awareness Month
- Technology Insights
- The Cyber Security Report
- The Next Generation Cyber Security Experts
Shows & Panels
Hackers use alert system for zombie warnings
Wednesday - 2/13/2013, 10:10pm EST
DETROIT (AP) -- Warnings about the zombie apocalypse may seem pretty amusing, but officials say they're dead serious about figuring out who hacked into the nation's public warning system to broadcast such messages in a handful of states.
So far, people in California, Michigan, Montana and New Mexico have heard the warnings about attacking zombies that have been sent over the Emergency Alert System.
"Local authorities in your area have reported the bodies of the dead are rising from their graves and attacking the living," one message warned. "Do not attempt to approach or apprehend these bodies as they are considered extremely dangerous."
The subject matter may be humorous, but Greg MacDonald with the Montana Broadcasters Association said the consequences of such attacks on the alert system could be severe.
"This looks like somebody being a prankster, but maybe it's somebody testing just to see if they could do this, to do some real damage," MacDonald said. "Suddenly you create a panic and people are fleeing somewhere and you end up with traffic jams and accidents and who knows what."
The U.S. recently replaced its old telephone-based alert system with a web-based one. The Federal Communications Commission sent an urgent advisory Tuesday urging stations to reset their alert system passwords, disconnect Internet connections or take other steps to make sure the equipment is protected from outside attack.
In Michigan, hackers broke into the system with audio or text messages at two stations on Monday. Michigan Association of Broadcasters President Karole White said the breach appeared to be related to default passwords that the stations hadn't changed.
In Los Angeles, a radio station that had its alert system breached sent out a zombie message, according to Richard Rudman, a broadcast engineer and vice chair of the California State Emergency Communications Committee. He declined to name the station but said any that were hacked were using default passwords for their alert systems or lacked adequate computer security.
The FCC on Tuesday also asked stations to check their equipment to make sure no further unauthorized alerts were queued up for future transmission, according to a copy of the advisory provided by the Montana Broadcasters Association.
No one has been arrested in connection with the hacking incidents.
Other attempts to access to emergency systems in recent days were thwarted by updated passwords, said Edward Czarnecki with New York-based Monroe Electronics, which manufacturers the alert equipment used by most television and cable companies.
Where the hackers succeeded, Czarnecki said a failure by stations to provide adequate computer security was at fault.
All U.S. broadcasters are required to be part of the Emergency Alert System, which evolved from Cold War-era systems dating to the 1950s and '60s. The system was created so the president could address the public in a national emergency, but it's mainly used by state and local authorities to deliver weather warnings and Amber Alerts. The first national test of the revamped system was in November 2011.
WNMU in the northern Michigan city of Marquette was broadcasting an episode of "Barney and Friends" just before 4 p.m. Monday when an ominous voice warned of zombies on the loose. The station quickly caught the errant message and disabled the system.
"There were really no complaints," said station general manager Eric Smith. "A couple of viewers ... called, wondering what it was all about."
Michigan FBI spokesman Simon Shaykhet said his office has been notified but declined further comment. The Associated Press left messages with representatives of the Federal Communications Commission and Department of Homeland Security.
The Federal Emergency Management Agency said its public alert and warning system wasn't breached and the hacking incidents did not affect its ability to activate the system nationally. FEMA also said it's supporting the FCC and other federal agencies on the investigation.
White, who oversees the alert system in Michigan, says she's confident that systems there are now secure, though any breach is a concern.
"We feel fortunate they were not able to get into the entire Emergency Alert System -- that's the good news," she said. "The bad news is they got in at all."
Brown contributed from Billings, Mont.
Follow Jeff Karoub on Twitter: http://twitter.com/jeffkaroub
Copyright 2013 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.