The Federal Bureau of Investigation (FBI) has charted a growing interest in cyber terrorism beyond the breaches, hacks and theft that have thus far hit domestic targets, an official said Wednesday.
“It focused against the websites that are hosted in the U.S.,” Joseph Demarest, assistant director for the bureau’s cyber division, said during a House Homeland Security subcommittee hearing.
The FBI has also identified three groups seeking to cause physical damage through cyber attacks. Such cyber terrorists are not yet partnering with criminal rings, but Demarest said potential terrorists were visiting criminal forums to gain new techniques and tools. He did not name the groups, suggesting that the panel discuss them in a closed session following the public hearing.
Additionally, Demarest noted an increased interest in cyber attacks from traditional terror groups, including Hezbollah. He said the Lebanon-based group is currently focusing its cyber efforts regionally, but he did not rule out the potential for nonstate actors to perform international cyber attacks.
“I would say desire is strong. I would say the capability is growing,” he said.
The potential for cyber terrorism poses a challenge to the FBI, which works with the Department of Homeland Security to help secure the private sector against attacks. While the
.mil and .gov domains are relatively prepared for such an event, Demarest was less confident in the private sector’s resilience.
“Once you get into the .com space, it’s varied levels of preparedness,” he said.
Finance, transportation and energy are “well prepared,” he added. These sectors plus communications and IT are the bureau’s top priorities.
Larry Zelvin, director of DHS’ National Cybersecurity and Communications Integration Center (NCIC), agreed that those sectors were the most at risk and most watched, but he warned of weaknesses elsewhere.
“If we’re not seeing it, is that because it’s not being reported?” he said at the hearing. “I’m worried about what we don’t know.”
Zelvin said cyber terrorists would attack in any state against any sector.
“If there’s an opening, there’s an adversary that’s going to see where they can go and what they can steal.”