Did You Know? Reverse Proxy Phishing Serious Threat to Maritime Industry

October 28, 2024

Did You Know? Reverse Proxy Phishing Serious Threat to Maritime Industry
© ZETHA_WORK / Adobe Stock

Reverse proxy phishing, a more sophisticated version of classic phishing cyberattack, could significantly impact maritime sectors operations, from the disruption of shipping logistics to the manipulation of sensitive communication systems, resulting in delays, loss of reputation, and costly recoveries.

According to the report from Marlink’s Security Operations Center (SOC) on cyber security threats, a significant portion of the threats neutralized by the SOC have continued to follow the most common attack vector seen since 2022: phishing.

However, in the first half of 2024, there has been a notable increase in a more advanced form known as ‘reverse proxy phishing’.

Phishing is a classic cyberattack method where attackers impersonate legitimate entities (like banks or service providers) to trick users into providing sensitive information, such as login credentials or financial data. Traditional phishing often relies on fake websites or fraudulent e-mails to capture user data.

Reverse proxy phishing, on the other hand, is a more sophisticated version. Instead of simply creating a fake website, the attacker sets up a ‘proxy’ that sits between the legitimate website and the victim. This proxy captures the user’s credentials and, in real-time, forwards them to the actual site, making the victim feel like everything is normal.

The danger of reverse proxy phishing lies in its ability to bypass multi-factor authentication (MFA), making the victim feel like everything is normal while attackers gain full access to sensitive systems, which could have serious repercussions for the maritime industry.

The U.S. Coast Guard (USGC) plans to introduce new cyber security rules soon, with implications for maritime and offshore energy cyber space as well.

If you are in New Orleans on November 13, 2024, sign up now for a free lunch and moderated conference discussion to learn more about the new USGC cyber security rules and their impact on the vessel owner/operators, OEMs and shipyards. Featured speakers include:

  • Rear Admiral Wayne R. Arguin Jr., Assistant Commandant for Prevention Policy (CG-5P), U.S. Coast Guard
  • Dain Detillier, Executive VP – LNG Operations, Harvey Gulf, LLC
  • Stewart Alpert, Chief Information Security Officer & Head of Technology, Hornblower Group
  • Angeliki Zisimatou, Director, Cybersecurity, American Bureau of Shipping
  • Phillip Bannerman, VP Sales Americas, Marlink
Fugro Secures Offshore Wind Site Survey in German North Sea

June 23, 2025

Fugro Secures Offshore Wind Site Survey in German North Sea

Triton FPSO Set to Come Back Online with Full Ramp Up to Follow

June 30, 2025

Triton FPSO Set to Come Back Online with Full Ramp Up to Follow

Siemens Gamesa to Help Build Japan’s Offshore Wind Supply Chain

June 24, 2025

Siemens Gamesa to Help Build Japan’s Offshore Wind Supply Chain

Shearwater Lands 4D Survey at Equinor’s Norwegian Sea Field

June 20, 2025

Shearwater Lands 4D Survey at Equinor’s Norwegian Sea Field

Equinor and Gwynt Glas Secure Rights to Build Floating Wind Farms off UK

June 19, 2025

Equinor and Gwynt Glas Secure Rights to Build Floating Wind Farms off UK

OPT Secures US Patent for Floating Marine Vehicle Charging System

June 27, 2025

OPT Secures US Patent for Floating Marine Vehicle Charging System