What happened to the Texas-bound oil tankers?
Recently, two oil tankers headed for Texas came under cyberattacks that disrupted their onboard systems. The VL Prosperity, carrying millions of barrels of oil from Egypt to Texas, experienced critical compromises in its engine and communication controls. This forced a joint FBI and U.S. Coast Guard cyber response team to board the vessel to investigate and secure its systems. Another tanker, Kohaku, also reportedly faced similar issues while en route to load liquefied petroleum gas.
How did the cyberattacks affect the ships' operations?
The attackers infiltrated core engine-room systems, resulting in a dangerous increase in engine speed and disabling of fuel and engine-oil tanks. Additionally, they disrupted the ships' communication systems for more than a day, severely limiting crew ability to report status or request help. These manipulations created significant risks of mechanical failure or accidents at sea and highlighted vulnerabilities in maritime operational technology networks.
Who might be behind these incidents and what are the implications?
No hacker group has openly taken credit, but regional media suggested potential links to Iranian state-associated actors, framing the attacks as geopolitical messaging. Such events underscore the growing use of cyber means in international conflicts and bring to light the strategic importance of maritime cybersecurity. The attacks demonstrate how hostile actors can exploit operational technology in critical supply chains and energy logistics.
What can maritime operators and cybersecurity professionals learn from this?
These incidents demonstrate a need for comprehensive cybersecurity measures specifically tailored for maritime vessels, including robust network monitoring, incident response readiness, and isolation of critical control systems. The ability of cyber teams to rapidly board and assess the ship's digital integrity was crucial to regaining control and preventing further damage. Enhanced cooperation between maritime authorities and cybersecurity experts is essential to protect global shipping from evolving cyber threats.