Hacker infiltrated NASA and stole files using £34 Raspberry Pi

  25 June 2019    Read: 1213
  Hacker infiltrated NASA and stole files using £34 Raspberry Pi

A hacker used a tiny Raspberry Pi computer to infiltrate NASA's Jet Propulsion Laboratory network, the agency has revealed.

The unknown attacker was able to steal sensitive data and forced the temporary disconnection of space-flight systems

The April 2018 attack went undetected for nearly a year, according to an audit report issued on June 18, and an investigation is still underway to find the culprit.

A Raspberry Pi is a credit-card sized device sold for about £34 ($35) that plugs into home televisions.

It is mainly used to teach coding to children and promote computing in developing countries.

Prior to detection, the attacker was able to steal 23 files amounting to approximately 500 megabytes of data - around 3/4 of the information stored on a CD - the report from NASA's Office of inspector General said.

This included two restricted files from the Mars Science Laboratory mission, which handles the Curiosity Rover, and information relating to the International Traffic in Arms Regulations which restrict the export of US defence and military technologies.

NASA came to question the integrity of its Deep Space Network data 'and temporarily disconnected several space flight-related systems from the JPL network.'

The breach came about as a result of a system administrator failing to update the database that determines which devices have access to the network. As a result, new devices could be added without proper vetting.

In response to the attack, the JPL 'installed additional monitoring agents on its firewalls' and was reviewing network access agreements with its external partners, the report said.

'More importantly, the attacker successfully accessed two of the three primary JPL networks,' the report said.

'Officials were concerned the cyberattackers could move laterally from the gateway into their mission systems, potentially gaining access and initiating malicious signals to human space flight missions that use those systems.'

The news comes as Raspberry Pi today released the latest version of the DIY motherboard.

Its makers claiming it is the world's most affordable multimedia desktop PC.

The Raspberry Pi 4 is capable of driving two independent screens running 4K resolution content and has three times the processing power of its predecessor.

The credit card-sized computer is designed to be highly customisable with an appeal to computer hobbyists.

It can also be bought in a bundle with a mouse, keyboard, SD card, power supply, cables and case for the first time to help recreate the experience of a desktop computer.

The new computer also includes Gigabit Ethernet and USB 3.0 connectivity ports on its single board to allow other devices to be connected to it.

Created by the Raspberry Pi Foundation, the device is the fourth-generation model of the charity's computer.

They are designed to be low-cost, high-performance devices which enable more people around the world to gain access to a computer for the first time.

Co-founder Eben Upton said the updates to the new computer meant it should now be considered as a competitor to traditional desktops in the PC market.

'The vision behind Raspberry Pi 4 is to make a rich multimedia PC experience accessible to everyone,' he said.

'By offering a "just right" level of performance for most users, we've been able to do this at roughly a tenth the cost of a traditional desktop PC.

'This is a significant development for the PC market as a whole. Raspberry Pi is already the best-selling British computer of all time.

In 2018 Q4 Raspberry Pi 3+ and earlier models accounted for 2.5 per cent of the global PC market.

The Raspberry Pi 4 also comes with a range of programming languages, letting users enter the world of developing and coding, as well as using the device like a traditional PC.

It is already used widely in education and industry.

 

The Daily Mail


More about: NASA