Tuesday, February 3, 2015



Complete DHS Report for  February 3, 2015

Daily Report

Top Stories

 · A fire at an Escanaba Power Plant substation in Michigan caused an explosion February 2 that knocked out power to an unknown number of Upper Peninsula Power Company customers and prompted the closure of Escanaba schools.– WBUP 10 Ishpeming/WBKP 10 Ishpeming

1. February 2, WBUP 10 Ishpeming/WBKP 10 Ishpeming – (Michigan) City of Escanaba working to restore power. A fire at an Escanaba Power Plant substation in Michigan caused an explosion February 2 that knocked out power to an unknown number of Upper Peninsula Power Company customers and prompted the closure of Escanaba schools. Escanaba Public Safety announced that those affected by the outage should expect rolling blackouts till February and City officials are working to restore power. Source: http://abc10up.com/large-scale-explosion-at-power-plant-causes-outages/

  ·The National Highway Traffic Safety Administration reported January 31 that Toyota, Chrysler, and Honda issued a recall for 2.12 million vehicles due to a malfunction that causes seat-belt tightening and inadvertent air bag deployment. – NBC News

5. January 31, NBC News – (National) Automakers recall 2.1 million vehicles for faulty air bags. The National Highway Traffic Safety Administration reported January 31 that Toyota, Chrysler, and Honda issued a recall for 2.12 million vehicles manufactured during the early 2000s due to a malfunction that causes seat-belt tightening and inadvertent air bag deployment. Approximately one-half of the affected vehicles are also recalled under an existing Takata Corp. issue that causes inflators to spray metal fragments into the vehicles’ cabins upon airbag deployment.. Source: http://www.nbcnews.com/business/consumer/automakers-recall-2-1-million-vehicles-faulty-air-bags-n297586

 · A Coca-Cola bottling factory in Speedway, Indiana, was evacuated and shutdown January 31 due to a leak from an 80,000-gallon tank that released toxic levels of ammonia inside the plant. – WTHR 13 Indianapolis

12. February 2, WTHR 13 Indianapolis – (Indiana) Ammonia leak at Speedway Coca Cola plant prompts evacuation; shutdown. The Coca-Cola bottling factory in Speedway, Indiana, was evacuated and shutdown January 31 due to a leak from an 80,000-gallon tank that held ammonia used in the refrigeration processes at the plant. Systematic closure of shut-off valves helped lower the toxic levels of ammonia found inside the factory, and HAZMAT crews responded to test the air and clear the scene. Source: http://www.wthr.com/story/27994879/ammonia-leak-at-speedway-coca-cola-plant-prompts-evacuation-shutdown

 · Spring Hill High School in Maury County, Tennessee, was evacuated and closed after a school staff member found an elaborate explosive device in a bathroom January 30. – Nashville Tennessean (See item 24)

24. January 30, Nashville Tennessean – (Tennessee) Spring Hill student arrested after explosive found. Students and staff at Spring Hill High School in Maury County, Tennessee, were evacuated to a nearby middle school and dismissed after a school staff member found an elaborate explosive device sitting on a stall hand rail in a bathroom January 30. One student was arrested in connection to possessing the device which was safely removed and dismantled by a bomb squad. Source: http://www.tennessean.com/story/news/2015/01/30/spring-hill-high-school-evacuated-after-device-found-in-bathroom/22585679/

Financial Services Sector

Nothing to report

Information Technology Sector

25. February 2, WTIC 61 Hartford – (International) Beware of phishing scam pretending to be Better Business Bureau questionnaire. The Better Business Bureau (BBB) warned February 2 that scammers sent bogus emails to possibly tens of thousands of businesses across the country, prompting the recipients to open a ZIP file attachment which leads to a Web site that delivers malware onto the user’s computer. The BBB is working with security vendors to mitigate the threat and disable the Web site. Source: http://foxct.com/2015/02/02/phishing-scam-spoofs-bbb-questionnaire-businesses-warned-not-to-click/

26. February 2, Help Net Security – (International) Raptr hacked, user info and passwords compromised. A representative from Raptr, a gaming social network site, announced January 28 that its network may have been breached and an unidentified number of users’ data, including names, email addresses, and password hashes, may have been accessed. Officials advised users to update log-in credentials associated with their Raptr account and change any related passwords. Source: http://www.net-security.org/secworld.php?id=17903

27. February 2, Threatpost – (International) Another Flash zero day emerges. Adobe released February 2 that it is working on a patch for a zero day vulnerability in Flash Player 16.0.0.296 that could cause a crash and allow an attacker to take control of the affected system. The vulnerability is reportedly being exploited via drive-by-download attacks against Windows, OS X, and Linux systems running Internet Explorer and Firefox. Source: http://threatpost.com/another-flash-zero-day-emerges/110786

28. February 1, Securityweek – (International) Hackers compromise business IM service HipChat. HipChat posted a security notice January 31 warning that hackers breached the firm’s defenses and accessed names, usernames, email addresses, and encrypted passwords for less than 2 percent of its customers. HipChat triggered a password reset for all affected users as a precaution. Source: http://www.securityweek.com/hackers-compromise-business-im-service-hipchat

29. January 30, Threatpost – (International) Facebook malware poses as Flash update, infects 110K users. A trojan posing as a Flash update infected approximately 110,000 Facebook users in 2 days by posting malicious video links that lead to a malware downloader on the profiles of previously infected users. Facebook is aware of the malware that can manipulate keystrokes and mouse movement on an infected computer and is working to block links to the scam. Source: http://threatpost.com/facebook-malware-poses-as-flash-update-infects-110k-users/110775

Communications Sector
30. February 1, Leighton Times News – (Pennsylvania) Copper wire stolen from cell tower. State Police at Lehighton are looking for a suspect for the theft of copper wire from a cell tower in Ross Township that belonged to Verizon wireless February 1. Police report that theft occurred between November 3 and January 28. Source: http://www.tnonline.com/2015/feb/01/copper-wire-stolen-cell-tower