Mississippi power plant costs cross $7.5B


The Kemper County power plant

High Voltage Maintenance Training Online

Our customized live online or in‑person group training can be delivered to your staff at your location.

  • Live Online
  • 12 hours Instructor-led
  • Group Training Available
Regular Price:
$599
Coupon Price:
$499
Reserve Your Seat Today

Kemper County power plant costs and delays highlight lignite coal gasification, syngas production, carbon capture targets, and looming rate plans as Mississippi Power navigates Public Service Commission oversight and shareholder-ratepayer risk.

 

Key Points

Costs exceed $7.5B with repeated delays; rate impacts loom as syngas, lignite, and carbon capture systems mature.

✅ Estimate tops $7.5B; customers could fund about $4.3B

✅ Carbon capture target: 65% CO2 via syngas from lignite

✅ Rate plans pending before the Public Service Commission

 

A Mississippi utility on Monday delayed making proposals for how its customers should pay for an ever-more-expensive power plant, even as the estimated cost of the facility crossed $7.5 billion.

The Kemper County power plant will be tasked with mining lignite coal a few hundred yards away from the plant. That coal is moved through a process that will convert it to syngas. The syngas is then used to drive the energy output of the plant, and the resulting electricity is then moved into the grid, where transmission projects influence regional reliability and capacity.

Thomas Fanning, CEO of parent Southern Co., told shareholders in May that Mississippi Power would file rate plans for its Kemper County power plant this month. But still unable to operate the plant steadily enough to declare it finished, Mississippi Power punted, instead asking to hold rates level for 11 months to pay off costs that have already been approved by regulators.

Mississippi Power says it now hopes to reach commercial operation in June. The plant is more than three years behind schedule, with 10 delays announced in the past 18 months. It was originally supposed to cost $2.9 billion.

The company also said monday that it will have to replace troublesome parts of the facility much sooner than expected, including units that cool the synthetic gas produced from soft lignite coal by two gasifier units, plus ash handling systems in the gasifiers.

Kemper is designed to take synthetic gas, pipe it through a chemical plant to remove carbon dioxide and other chemicals, and then burn the gas in turbines to generate electricity. It’s designed to capture 65 percent of carbon dioxide from the coal, releasing only as much of the climate-warming gas as a typical natural gas plant. It’s a key effort nationally to maintain coal as a viable fuel source, even as coal unit retirements proceed in other states.

Mississippi Power raised its estimate of Kemper’s cost by $209.4 million, with shareholders absorbing $185.9 million, while ratepayers could be asked to pay $23.5 million. Overall, customers could be asked to pay $4.3 billion. Southern shareholders have agreed to absorb $3.1 billion, which has risen by $500 million since November.

The elected three-member Public Service Commission in 2015 allowed the company to raise rates on its 188,000 customers by $126 million a year. That paid for $840 million in Kemper work, which began generating electricity in 2014 using piped-in natural gas. Some items covered by that 15 percent rate increase will be paid off in coming months, but Mississippi Power now proposes to repay costs from regulatory proceedings earlier than originally projected.

In testimony filed with the Public Service Commission, Mississippi Power Chief Financial Officer Moses Fagin said that keeping rates level would reduce whiplash to customers when rates rise later to pay for Kemper, would pay off accumulated costs more quickly and would help the company wean itself off financial support from Southern Co. while maintaining credit ratings and positioning for a possible bond rating upgrade over time.

“Cash flow is important to the company in maintaining its current ratings and beginning to rebuild its credit strength on a more independent basis apart from the extraordinary parental support that has been required in recent years to maintain financial integrity,” Fagin testified.

Spokesman Jeff Shepard said Mississippi Power is still drawing up two rate plans — one requiring a sharp, immediate rate increase, and a “rate mitigation plan” that might cushion increases amid declining returns in coal markets. He said the company isn’t sure when it will file them. Fagin suggested the Public Service Commission set a new deadline of March 2, 2018.

 

Related News

Related News

Carnegie Teams with Sumitomo for Grid-Scale Vanadium Flow Battery Storage

Australian VRF Battery Market sees a commercial-scale solar and storage demonstration by Energy Made Clean, Sumitomo Electric, and TNG, integrating vanadium redox flow systems with microgrids for grid-scale renewable energy reliability across Australia.

 

Key Points

A growing sector deploying vanadium redox flow batteries for scalable, long-life energy storage across Australia.

✅ Commercial demo by EMC, Sumitomo Electric, and TNG

✅ Integrates solar PV with containerized VRF systems

✅ Targets microgrids and grid-scale renewable reliability

 

Carnegie Wave Energy’s 100 per cent owned subsidiary, Energy Made Clean, is set to develop and demonstrate a commercial-scale solar and battery storage plant in Australia, after entering into a joint venture targeting Australia’s vanadium redox flow (VRF) battery market.

Carnegie said on Tuesday that EMC had signed a memorandum of understanding with Japanese company Sumitomo Electric Industries and ASX-listed TNG Limited to assess the potential applications of VRF batteries through an initial joint energy storage demonstration project in Australia.

The deal builds on a June 2015 MOU between EMC and emerging strategic metals company TNG, to establish the feasibility of Vanadium Redox batteries. And it comes less than two months after Carnegie took full ownership of the Perth-based EMC, which has established itself as one of the Australia’s foremost micro-grid and battery storage businesses, reflecting momentum in areas such as green hydrogen microgrids internationally.

Energy Made Clean’s main role in the partnership will be to identify commercial project site opportunities, while also designing and supplying a compatible balance of plant – likely to include solar PV – to integrate with the VRF containerised system being supplied by Sumitomo.

The demonstration will be of commercial size, to best showcase Sumitomo’s technology, the companies said; with each party contributing to their core competencies, and subsequently cooperating on the marketing and sales of VRF batteries.

As we have noted on RE before, vanadium redox flow batteries are tipped to be one of the key players in the booming global energy storage market, alongside innovations like gravity storage investment, as more and more renewable energy sources are brought onto grids around the world.

The batteries are considered uniquely suited to on- and off-grid energy storage applications, and emerging models like vehicle-to-building power, due to their scalability and long asset lives, with deep and very high cycling capability.

Australia, as well as being a key market for battery storage uptake, has seen a recent grid rule change that could impact big batteries, and has been noted for its potential to become a top global producer of vanadium – a metal found in a range of mineral deposits.

A number of Australian companies are already active in the local vanadium redox flow battery market, including miner Australian Vanadium – which recently inked a deal with Germany battery maker Gildemeister Energy Storage to sell its CellCube range of VRF batteries – and Brisbane based battery maker Redflow.

Energy Made Clean CEO John Davidson said the signing of the MOU would bring key industry innovators together to help revolutionise the vanadium redox flow battery market in Australia.

“This strategic MoU represents a compelling three-way tie-up of an emerging miner, a manufacturer and an integrator to accelerate the development of a major new energy growth market,” Davidson said.  

 

Related News

View more

Unilorin develops device to check electricity theft

Ilorin Electricity Theft Device delivers remote monitoring and IoT-based detection for smart meters, identifying bypassed prepaid meters, triggering disconnects, and alerting the utility control room to curb distribution losses and energy theft.

 

Key Points

A prototype IoT system that detects electricity theft, enables remote disconnection, and alerts utility control rooms.

✅ Remote monitoring flags bypassed prepaid meters.

✅ Sends alerts to utility control room with customer details.

✅ Enables safe remote cut-off to reduce distribution losses.

 

The Department of Electrical and Electronics Engineering, University of Ilorin, has unveiled a prototype anti-theft device capable of remotely monitoring and detecting customers stealing electricity.

The Acting Head of the Department, Dr Mudathir Akorede told newsmen on Tuesday in Ilorin that the device could also cut off electricity supply to the premises of customers stealing electricity.

”This will simultaneously send a message to the utility control room, and in light of rising ransomware attacks targeting power systems, to alert the system operator with such customer’s details displayed on the control panel,” he said.

Akorede said that processes of filing application for patenting the invention, in line with emerging IoT security standards for the electricity sector, had commenced through the university’s Laboratory to Product Centre.

The don explained that the device was developed by himself and some students of the Department, reflecting how university teams contribute to innovations like generating electricity from falling snow in the field.

Akorede said, “I gave the project to my undergraduate students; they carried out the project to a level and I took it over and brought it to a level that was up to standard.”

The Don further said,”The invention is now up to the standard that it can be patented.

“I have brought this to the attention of the Ibadan Electricity Distribution Company, although not officially, but if adopted, and as utilities pursue digitizing the grid strategies, the device would enable distribution companies to cut their commercial losses substantially.”

He said that the idea followed the discovery that most people use electricity without paying for it.

”A lot of people that have been able to get the prepaid meter, even though they can afford to pay their bills, still want to bypass this thing to steal electricity and this is not helping the companies.

“It is not helping all of us as a whole. If the industry should collapse, with emerging cyber weapons that can disrupt power grids underscoring systemic risks, everybody would bear the brunt of that problem and that is why the consumers too have to share out of the problem

“But this is not to say that distribution companies also do not have their share of the blame by not wanting to take on responsibilities such as faulty transformers.”

 

Related News

View more

How Hedge Funds May Be Undermining the Electric Car Boom

Cobalt Supply Chain for EV Batteries faces shortages as lithium-ion demand surges; Tesla gigafactories, ethical sourcing, Idaho cobalt mining, and DRC risks intensify pricing, logistics, and procurement challenges for manufacturers and investors.

 

Key Points

A network supplying cobalt for lithium-ion cathodes, strained by EV demand, ethical sourcing pressures, and DRC risk.

✅ EV growth outpaces cobalt supply, widening deficits

✅ DRC reliance drives ESG scrutiny and sourcing shifts

✅ Idaho projects and stockpiling reshape U.S. supply

 

A perfect storm is brewing in the 21st Century battery market.

More specifically, it's about what goes into those batteries - and it's not just lithium.

The other element that makes up 35 percent of the lithium-ion batteries mass produced at Tesla's Nevada gigafactory and at a dozen of other behemoths slated to come on line, is cobalt. And it's already in dramatically short supply. A part of the answer to the cobalt deficit is 100 percent American, and this little-known miner is sitting on a prime Idaho cobalt project that is one of only two that looks likely to come online in the U.S. and it's right in Tesla's backyard.

 

High-Energy Batteries Need More Cobalt Than Lithium 

If you've been focusing your investment on lithium supplies lately you've been missing the even bigger story. EV batteries need about 200 grams of refined cobalt per kilowatt of battery capacity. Power walls need more than twice that. Between March 2016 and April 2017, the cost of the cobalt in that mix nearly tripled. But it isn't just the price that's got manufacturers worried. It's the shortage of availability. Keeping gigafactories stocked with enough cobalt to run at capacity is the challenge of the decade.

Tesla, now with a $50-billion market cap, launched a $5-billion battery gigafactory in Nevada in January. By the end of 2017, it will have doubled the entire global battery production capacity. By next year, it will be producing more batteries than the rest of the world combined.

It is estimated that Tesla's gigafactory alone will need anywhere between 7,000 and 17,500 tonnes of refined cobalt every year.

Tesla used to buy its finished battery cells from Panasonic, which in turn got its processed cathode powders from a Japanese company, Sumitomo was processing its own cobalt in the Philippines. However, that facility is already running at capacity and couldn't even begin to handle Tesla's gigafactory demand. In other words, Tesla's supply chain is no longer secure. And that's just Tesla.

The EV market is fifteen times larger than it was five years ago. The market has experienced a comppound annual growth rate of over 72 percent from 2011-2016, with new sources like Alberta's lithium-laced oil fields drawing investment alongside cobalt. This year, analysts expect it to gain another 25-26 percent. Last year, global EV production grew 41 percent, and sales are up more than 60 per cent year to year.

In addition,the Iron Creek project isn't a new exploration property. It has already seen major historic exploratory work, including 30,000 feet of diamond drilling. Iron Creek has historic (non 43-101 compliant) indications of 1.3 million tons grading 0.59 percent of cobalt with encouraging indications of up to 10 million tons. The 'closeology' is also brilliant. It's right next to the only advanced cobalt project in the U.S., which has a resource of 3 million-plus tonnes of cobalt.

As the battery market hits fever pitch and the supply-chain bottlenecks become unbearable, homegrown exploration is the key-first-movers and first investors will be the biggest beneficiaries.

 

A Very Precarious Supply Chain 

Supply is already in deficit, and we're also looking at an anticipated 500 percent increase in demand, making EV battery recycling an increasingly important complement to mining. Analysts at Macquarie Research project deficits of 885 tonnes of this resource next year, 3,205 in 2019 and 5,340 in 2020.

Not only is demand set to wildly outstrip supply very soon, but current supply (50 percent) comes primarily from the Democratic Republic of Congo (DRC). Buyers are coming under increasing pressure to look elsewhere for cobalt as the U.S. moves to work with allies to secure EV metals through diversified supply chains. The DRC has a horrendous record when it comes to labor practices and human rights.

Ask Apple Inc.  The tech giant recently announced it would stop buying unethical DRC cobalt for its iPhones - and as such, it has been forced to look for new suppliers.

The perfect storm continues: Some 95 percent of the world's cobalt is produced as a byproduct of copper and nickel mining, where concerns about ethical sourcing have put a spotlight on Canada's role in sustainable nickel practices worldwide. This means that cobalt supply is dependent on copper and nickel mining, and if those commodities are uneconomic to mine, there are no cobalt by-product results.

Not only is US Cobalt one of the first movers on the All-American ethical cobalt scene, but it's also financed to advance its Idaho Cobalt Belt project, and hopes to prove up 10 million tonnes of cobalt resource.

 

The Dream Team Behind Pure American Cobalt 

The CEO of US Cobalt, Wayne Tisdale, is a legend in spotting emerging trends with impeccable timing and has created billions in shareholder value. He's already done it with uranium, gold and oil and gas, and his most recent homerun was in lithium, with Pure Energy. When it launched in 2012, lithium was selling for about $5,000 per tonne. Within 18 months, it had increased 450 percent.

His next bet is on cobalt.

Tisdale and his team at Intrepid Financial have, in recent years, created $2.7 billion in value by building and financing 5 companies in completely different industries:

  • Rainy River (gold) was worth $1.2 billion at its peak
  • Xemplar (uranium) hit $1 billion at its peak
  • Ryland Oil (oil and gas) sold for $114 million
  • Webtech Wireless (tech) was worth $300 million at its peak
  • Pure Energy (lithium) is worth $65 million (and counting)

The bottom line? There is no other commodity on the market right now that we need more.

Just watch what the hedge funds are doing with cobalt because it's unprecedented. The run on physical cobalt started in February in the least expected corner: Major hedge funds started buying up physical cobalt and hoarding it in order to gain exposure, resulting in a major supply shortage for the blue metal. Swiss-based Pala Investments and China's Shanghai Chaos have already hoarded 17 percent of last year's global production. At today's prices that's worth around $280 million. At tomorrow's prices, it will be worth a lot more.

When hedge funds start stockpiling physical cobalt, it sends its traditional buyers into a panic to secure new shipments. Since November, cobalt prices have rallied more than 100 percent, and this is only the beginning. As the cobalt supply problem grows, and EV giants and gigafactories continue to increase demand, a home-grown solution is at hand. As a first principle of investing, where there is a supply problem, there is a massive opportunity for early investors.

 

Related News

View more

Coal comeback unlikely after Paris climate pact withdrawal, says utility CEO

US Shift From Coal to Renewables accelerates as natural gas, solar, and wind power gain market share, driven by the Paris climate agreement, clean energy mandates, smart grid upgrades, and energy efficiency.

 

Key Points

An industry trend where power producers replace coal with natural gas, solar, and wind to meet clean energy goals.

✅ Shareholders and customers demand cleaner power portfolios

✅ Natural gas, solar, and wind outcompete coal on cost and risk

✅ Smart grid and efficiency investments reduce emissions further

 

President Trump once again promised to revive the U.S. coal industry when he announced his intention to withdraw the U.S. from the Paris climate agreement.

But that reversal seems as unlikely as ever as electric power producers, the biggest consumers of coal in the U.S., continue to shift to natural gas and renewable energy sources like solar and wind power. In 2016, natural gas became the leading fuel for U.S. electricity generation for the first time, responsible for 33.8% of the output, compared with 30.4% for coal, according to the U.S. Energy Information Administration, even as coal-fired generation was projected to rise in 2021 in the short term.

Nick Akins, the CEO of American Electric Power, one of the largest utilities in the U.S., says the preference for gas, renewables and energy efficiency, will only grow in response to increasing demands from shareholders and customers for cleaner energy, regardless of changes in national energy policy.

With 5.4 million customers in 11 states, AEP plans to spend $1.5 billion on renewable energy from 2017 through 2019, and $13 billion on transmission and distribution improvements, including new “smart” technologies that will make the grid more resilient and efficient, AEP says.

We spoke with Akins on Thursday, just after Trump’s announcement. The transcript is edited for length and clarity.

 

What do you think of Trump’s decision to pull the U.S. from the climate agreement?

I don’t think it’s unexpected. He obviously made the point that he’s willing to renegotiate or have further dialogue about it. That’s a good sign. From our perspective, we’re going to continue along the path we’re already on toward a cleaner energy economy.

 

AEP and the U.S. electric power industry in general have been moving away from coal in favor of natural gas and renewable energy. Will this decision by the Trump administration have any impact on that trend?

If you look at our resource plans in all of the states we serve, they are focused on renewables, natural gas and transmission, as declining returns from coal generation pressure investment choices across the industry. And big-data analytics improves the efficiency of the grid, so energy efficiency is obviously a key component, as Americans use less electricity overall.

Our carbon dioxide emissions in 2016 were 44% below 2000 levels, and that progress will continue with the additions of more renewables, energy efficiency and natural gas.

So, you don’t see coal making a comeback at AEP or other utilities?

No, I don’t think so. … You wouldn’t make a decision (to build a coal power plant) at this point because it’s heavily capital-intensive, and involves a longer-term process and risk to build. And, of course, you can add renewables that are very efficient and natural gas that’s efficient and much less expensive and risky, in terms of construction and operation.

 

Do you plan to close any more coal-powered plants soon? 

I suspect we’ll see some more retirements in the future, with coal and nuclear closures test just transition in many communities, and as we progress towards that cleaner energy economy, and consider the expectations of our customers and shareholders for us to mitigate risk, you’ll continue to see that happen.

But on the other hand, I want to make sure there’s an understanding that coal will remain a part of the portfolio, even though in rare cases new coal plants are still being built where options are limited, but it will be of a lesser degree because of these other resources that are available to us now that weren’t available to us just a few years ago.

 

Do you find yourself under more or less pressure from customers and shareholders to move to cleaner forms of energy?

I think there’s more pressure. Investors are looking for the sustainability of the company going forward and mitigation of risks … From a customer standpoint, we have some large customers interested in moving into our service territory who are looking for cleaner energy, and want to know if we’re focused on that. Some of them want to be supplied entirely by those clean sources. So, we’re clearly responding to our customers’ and our shareholders’ expectations.

 

What’s the solution for workers at coal mines and coal power plants who have lost their jobs?

Certainly, the skill sets of employees in mining and around machinery are transferable to other areas of manufacturing, like aerospace and defense. So, we’re really focusing on economic-development efforts in our service territories … particularly in the coal states … to bring coal miners back to work, not necessarily in coal mines but certainly (in manufacturing).

 

Related News

View more

Tesla’s lead battery expert hired by Uber to help power its ‘flying car’ service

Uber Elevate eVTOL Batteries enable electric air taxis with advanced energy storage, lithium-ion cell quality, safety engineering, and zero-emissions performance for urban air mobility, ride-hailing aviation, and scalable battery pack development.

 

Key Points

Battery systems for Uber's electric air taxis, maximizing energy density, safety, and cycle life for urban air mobility.

✅ Ex-Tesla battery leader guides pack design and cell quality

✅ All-electric eVTOL targets zero-emissions urban air mobility

✅ Focus on safety, energy density, fast charge, and lifecycle

 

Celina Mikolajczak, a senior manager for battery pack development at Tesla, has been hired by Uber to help the ride-hail company’s “flying car” project get off the ground. It’s an important hire because it signals that Uber plans to get more involved in the engineering aspects of this outlandish-sounding project.

For six years, Mikolajczak served as senior manager and technical lead for battery technology, cell quality, and materials analysis. She worked with Tesla’s suppliers, tested the car company’s lithium-ion batteries for long-term use as the age of electric cars accelerates, oversaw quality assurance, and conducted “failure analysis” to drive battery cell production and design improvements. In other words, Mikolajczak was in charge of making sure the most crucial component in Tesla’s entire assembly line was top of the line.

Now she works for Uber — and not just for Uber, but for Uber Elevate, the absurdly ambitious air taxi service that hinges on the successful development of electric vertical take-off and landing (eVTOL) vehicles. There are practically zero electric planes in service today, and definitely none being used in a commercial ride-hail service. The hurdles to getting this type of service off the ground are enormous.

Her title at Uber is director of engineering and energy storage systems, and today marks her first week on the job. She joins Mark Moore, the former chief technologist for on-demand mobility at NASA’s Langley Research Center, who joined Uber almost a year ago to help lend a professional appearance to Elevate. Both serve under Jeff Holden, Uber’s head of product, who oversees the air taxi project.

Uber first introduced its plan to bring ride-sharing to the skies in a white paper last year. At the time, Uber said it wasn’t going to build its own eVTOL aircraft, but stood ready to “contribute to the nascent but growing VTOL ecosystem and to start to play whatever role is most helpful to accelerate this industry’s development.”

Instead, Uber said it would be partnering with a handful of aircraft manufacturers, real estate firms, and government regulators to better its chances of developing a fully functional, on-demand flying taxi service. It held a day-long conference on the project in Dallas in April, and plans to convene another one later this year in Los Angeles. In 2020, Uber says its aerial service will take off in three cities: LA, Dallas-Fort Worth, and Dubai.

 

UBER’S TAKING A MORE PROMINENT ROLE

Now, Uber’s taking a more prominent role in the design and manufacturing of its fleet of air taxis, which signals a stronger commitment to making this a reality — and also more of a responsibility if things eventually go south, as setbacks like Eviation's collapse underscore.

Perhaps most ambitiously, Uber says the aircraft it plans to use (but, importantly, do not exist yet) will run on pure battery-electric power, and not any hybrid of gasoline and electricity. Most of the companies exploring eVTOL admit that battery’s today aren’t light enough or powerful enough to sustain flights longer than just a few minutes, but many believe that battery technology will eventually catch up, with Elon Musk suggesting a three-year timeline for cheaper, more powerful cells.

Uber believes that in order to sustain a massive-scale new form of transportation, it will need to commit to an all-electric, zero-operational emissions approach from the start, even as potential constraints threaten the EV boom overall. And since the technology isn’t where it needs to be yet, the ride-hail company is taking a more prominent role in the development of the battery pack for its air taxi vehicles. Mikolajczak certainly has her work cut out for her.

 

Related News

View more

Russia Develops Cyber Weapon That Can Disrupt Power Grids

CrashOverride malware is a Russian-linked ICS cyberweapon targeting power grids, SCADA systems, and utility networks; linked to Electrum/Sandworm, it threatens U.S. transmission and distribution with modular attacks and time-bomb payloads across critical infrastructure.

 

Key Points

A modular ICS malware linked to Russian actors that disrupts power grids via SCADA abuse and forced breaker outages.

✅ Targets breakers and substation devices to sustain outages

✅ Modular payloads adapt to ICS protocols and vendors

✅ Enables timed, multi-site attacks against transmission and distribution

 

Hackers allied with the Russian government have devised a cyberweapon that has the potential to be the most disruptive yet against electric systems that Americans depend on for daily life, according to U.S. researchers.

The malware, which researchers have dubbed CrashOverride, is known to have disrupted only one energy system — in Ukraine in December. In that incident, the hackers briefly shut down one-fifth of the electric power generated in Kiev.

But with modifications, it could be deployed against U.S. electric transmission and distribution systems to devastating effect, said Sergio Caltagirone, director of threat intelligence for Dragos, a cybersecurity firm that studied the malware and issued a recent report.

And Russian government hackers have shown their interest in targeting U.S. energy and other utility systems, with reports of suspected breaches at U.S. power plants in recent years, researchers said.

“It’s the culmination of over a decade of theory and attack scenarios,” Caltagirone warned. “It’s a game changer.”

The revelation comes as the U.S. government is investigating a wide-ranging, ambitious effort by the Russian government last year to disrupt the U.S. presidential election and influence its outcome, and has issued a condemnation of Russian power grid hacking as well. That campaign employed a variety of methods, including hacking hundreds of political and other organizations, and leveraging social media, U.S. officials said.

Dragos has named the group that created the new malware Electrum, and it has determined with high confidence that Electrum used the same computer systems as the hackers who attacked the Ukraine electric grid in 2015. That attack, which left 225,000 customers without power, was carried out by Russian government hackers, other U.S. researchers concluded. U.S. government officials have not officially attributed that attack to the Russian government, but some privately say they concur with the private-sector analysis.

“The same Russian group that targeted U.S. [industrial control] systems in 2014, including the Dragonfly campaign documented by Symantec, turned out the lights in Ukraine in 2015,” said John Hultquist, who analyzed both incidents while at iSight Partners, a cyber-intelligence firm now owned by FireEye, where he is director of intelligence analysis. Hultquist’s team had dubbed the group Sandworm.

“We believe that Sandworm is tied in some way to the Russian government — whether they’re contractors or actual government officials, we’re not sure,” he said. “We believe they are linked to the security services.”

Sandworm and Electrum may be the same group or two separate groups working within the same organization, but the forensic evidence shows they are related, said Robert M. Lee, chief executive of Dragos.

The Department of Homeland Security, which works with the owners of the nation’s critical infrastructure systems, did not respond to a request for comment Sunday.

Energy-sector experts said that the new malware is cause for concern, but that the industry is seeking to develop ways to disrupt attackers who breach their systems, including documented access to U.S. utility control rooms in prior incidents.

“U.S. utilities have been enhancing their cybersecurity, but attacker tools like this one pose a very real risk to reliable operation of power systems,” said Michael J. Assante, who worked at Idaho National Labs and is a former chief security officer of the North American Electric Reliability Corporation, where he oversaw the rollout of industry cybersecurity standards.

CrashOverride is only the second instance of malware specifically tailored to disrupt or destroy industrial control systems. Stuxnet, the worm created by the United States and Israel to disrupt Iran’s nuclear capability, was an advanced military-grade weapon designed to affect centrifuges that enrich uranium.

In 2015, the Russians used malware to gain access to the power supply network in western Ukraine, but it was hackers at the keyboards who remotely manipulated the control systems to cause the blackout — not the malware itself, Hultquist said.

With CrashOverride, “what is particularly alarming . . . is that it is all part of a larger framework,” said Dan Gunter, a senior threat hunter for Dragos.

The malware is like a Swiss Army knife, where you flip open the tool you need and where different tools can be added to achieve different effects, Gunter said.

Theoretically, the malware can be modified to attack different types of industrial control systems, such as water and gas. However, the adversary has not demonstrated that level of sophistication, Lee said.

Still, the attackers probably had experts and resources available not only to develop the framework but also to test it, Gunter said. “This speaks to a larger effort often associated with nation-state or highly funded team operations.”

One of the most insidious tools in CrashOverride manipulates the settings on electric power control systems. It scans for critical components that operate circuit breakers and opens the circuit breakers, which stops the flow of electricity. It continues to keep them open even if a grid operator tries to close them, creating a sustained power outage.

The malware also has a “wiper” component that erases the software on the computer system that controls the circuit breakers, forcing the grid operator to revert to manual operations, which means driving to the substation to restore power.

With this malware, the attacker can target multiple locations with a “time bomb” functionality and set the malware to trigger simultaneously, Lee said. That could create outages in different areas at the same time.

The outages would last a few hours and probably not more than a couple of days, Lee said. That is because the U.S. electric industry has trained its operators to handle disruptions caused by large storms, alongside a renewed focus on protecting the grid in response to recent alerts. “They’re used to having to restore power with manual operations,” he said.

So although the malware is “a significant leap forward in tradecraft, it’s also not a doomsday scenario,” he said.

The malware samples were first obtained by ESET, a Slovakian research firm, which shared some of them with Dragos. ESET has dubbed the malware Industroyer.

 

Related News

View more

Sign Up for Electricity Forum’s Newsletter

Stay informed with our FREE Newsletter — get the latest news, breakthrough technologies, and expert insights, delivered straight to your inbox.

Electricity Today T&D Magazine Subscribe for FREE

Stay informed with the latest T&D policies and technologies.
  • Timely insights from industry experts
  • Practical solutions T&D engineers
  • Free access to every issue

Live Online & In-person Group Training

Advantages To Instructor-Led Training – Instructor-Led Course, Customized Training, Multiple Locations, Economical, CEU Credits, Course Discounts.

Request For Quotation

Whether you would prefer Live Online or In-Person instruction, our electrical training courses can be tailored to meet your company's specific requirements and delivered to your employees in one location or at various locations.