The Real Threat of Drone Attacks on Critical Infrastructure

An unmanned aerial system was used to target an electrical substation in Pennsylvania on July 16, 2020, according to a recent Joint Intelligence Bulletin.

An unmanned aerial system (UAS) was used to target an electrical substation in Pennsylvania on July 16, 2020, according to a recent Joint Intelligence Bulletin (JIB). Published by the U.S. Department of Homeland Security (DHS), Federal Bureau of Investigation (FBI), and the National Counterterrorism Center (NCTC) on October 28, 2021, the JIB revealed a UAS targeted an electrical substation.

The UAS was deliberately modified with a copper wire intended to cause a spark to potentially “cause short circuit damage to transformers” at an electrical substation. Modifications were also made to the UAS with the intent to evade law enforcement UAS-tracing capabilities as various key parts were missing, including an internal memory card and camera. Although the UAS failed to damage the electrical substation, the incident is noteworthy as it marks the first time a UAS has been deliberately used to target critical infrastructure in the U.S., according to the FBI. The JIB states that the agencies “...expect illicit [unmanned aircraft system] activity to increase over the energy sector and other critical infrastructure facilities as use of these systems in the United States continues to expand.”

The threat vector of illicit UAS attacks has become evident in recent years, including recent attacks on critical infrastructure or political figures. Three recent examples provide insight into this reality:

• On November 7, 2021, Iraqi Prime Minister Mustafa al-Kadhimi survived an assassination attempt in which three explosive-laced drones targeted the Prime Minister’s residence.

• On March 7, 2021, Saudi oil fields were attacked with both drones and missiles; the attack resulted in a global spike in oil prices. As markets continue to become more globalized, UAS attacks on a country’s critical infrastructure can impact global markets.

• On January 25, 2019, Greenpeace flew a UAS over a French nuclear site and dropped a smoke bomb directly on the roof of nuclear plants. Although this was not an explosive-laden drone, the incident demonstrates the vulnerabilities that facilities have to UAS-borne attacks.

• On August 4, 2018, two UAS devices laden with explosives were used in an apparent assassination plot on Nicolás Maduro, the President of Venezuela, during a speech to the Bolivarian National Guard.

Although the use of UAS mitigation technologies is currently prohibited by U.S. laws and regulations, UAS detection technologies can be used and dramatically increase a venue operator’s situational awareness about the threats coming to their venue. As the threat of UAS increases, facilities operators must incorporate UAS detection capabilities and response plans into their venue security programs.

To learn more, please reach out to info@alumarisk.com.