Nuclear Regulatory Commission employees were tricked into disclosing passwords and downloading malware in three phishing attacks. The attacks occurred over a three-year period, according to an inspector general report. The NRC collects large amounts of information from nuclear facilities. Attackers likely were likely after that data to learn more about plant operations, a security expert says. Terrorists could use the information to plan an attack, while many nation states would likely be building a knowledgebase on U.S. nuclear facilities, he says.”]
Source: https://www.csoonline.com/article/2466725/workers-at-u-s-nuclear-regulator-fooled-by-phishers.html