Maritime cyber security specialist Naval Dome has signed a contract with Piraeus-based Stamco Ship Management to install its maritime cyber defense system aboard 55 Pure Car and Truck Carriers (PCTC).
Stamco Ship Management provides technical and commercial ship management services to various companies like NYK, MOL, K-Line, China Shipping, Höegh Autoliners, WWL, Eukor and Glovis.
Naval Dome will install the security system onboard the vessels’ bridge, navigation, communication and machinery control systems to deliver maximum, multi-layered protection from any existing or future cyber security threat.
Itai Sela, Naval Dome CEO, said. “We are delighted that Stamco has chosen Naval Dome to protect the critical systems aboard its fleet. The decision is indicative of the shipping industry’s growing realization that if systems are not protected they will remain a soft target with easy pickings for the cyber-criminal. If ships go unprotected, hackers can easily penetrate critical systems, without raising any suspicion until it is too late.”
Earlier this month a security industry report revealed that ransomware is now the most common type of malware, accounting for 39 percent of malware-related hacks. The Verizon report found that attacks are also moving into business-critical systems, which encrypt file servers or databases, inflicting more damage and commanding bigger ransom requests.
“Aside from the safety implications should a ship’s navigation, communication and machinery control systems be breached, there can be significant financial loss, with potential “ransom” pay-outs of millions of dollars to almost anonymous criminals,” Sela said.
“One thing that is really hampering change is the reluctance of shipowners to admit they have been hacked and system providers to acknowledge their equipment is not as secure as they believe them to be.
“While this is understandable, an anonymous platform similar to the Confidential Incident Reporting Program (CHIRP), whereby shipowners and operators can report security breaches, would help others avert attack and provide the industry with greater information on how best to mitigate against the increasingly advanced methods and systems hackers have at their disposal.”