UPDATE 4-Top U.S. fuel pipeline, crippled by ransomware attack, days away from restart
Adds statements from U.S. official, United Nations official, details on refinery operations, commentary from Georgia
By Stephanie Kelly and Devika Krishna Kumar
NEW YORK, May 10 (Reuters) - America's biggest gasoline pipeline is unlikely to resume significant operations for several days due to a ransomware cyberattack that Washington on Monday blamed on a shadowy criminal network called DarkSide.
The attack on the Colonial Pipeline between Houston and New Jersey, which provides nearly half the fuel to the U.S. East Coast, is one of the most disruptive digital ransom schemes ever reported.
The privately owned company on Monday said it was working on re-starting in phases with "the goal of substantially restoring operational service by the end of the week." nL1N2MX1MX
The FBI attributed the cyberattack to DarkSide, a group cyber experts say may be based in Russia or Eastern Europe. Its ransomware targets computers that do not use keyboards in the languages of former Soviet republics, they said.
But U.S. President Joe Biden said there was no evidence so far that Russia was involved in the attack. nW1N2M101I
"So far there is no evidence based on, from our intelligence people, that Russia is involved, although there's evidence that the actors' ransomware is in Russia," Biden said.
A statement in the group's name said, "Our goal is to make money, and not creating problems for society." Its statement did not mention Colonial Pipeline by name. nL1N2MX12A
Ransomware is a type of malware designed to lock computers by encrypting data and demanding payment to regain access. It is unknown how much money the hackers are seeking, and Colonial has not commented on whether it would pay. nL1N2MW0F3
Anne Neuberger, deputy national security adviser for cybersecurity, told reporters that the Biden administration is not offering advice on whether Colonial should pay the ransom. nL1N2MX1QB nW1N2M006Z
Colonial on Friday voluntarily shut its 5,500-mile pipeline network, which moves fuels including gasoline, diesel and jet fuel, to protect its systems. The closure triggered fears of retail gasoline price spikes, shortages and travel disruption.
The episode laid bare the vulnerabilities of energy infrastructure to hackers. U.S. lawmakers responded with calls for stronger protections for critical energy infrastructure.
A spokesman for United Nations Secretary-General Antonio Guterres said the attack showed that U.N. member states needed to combat cybercrime to avoid "devastating impact on the world that we all live in."
Colonial restarted some smaller lines on Sunday between fuel terminals and customer delivery points. But its main lines remained shut, and an alternative, smaller conduit owned by Kinder Morgan KMI.N serving the same region reached capacity.
This has created concerns in energy markets ahead of the summer vacation season, when gasoline demand and airline travel tend to peak.
PAIN AT THE PUMP?
Fuel demand in the southeastern United States has already picked up as consumers fear shortages. Gas stations in states such as Georgia, North Carolina and Tennessee were seeing some abnormal buying, said Patrick De Haan, head of petroleum analysis at GasBuddy.
The American Automobile Association said the national gasoline price average climbed 6 cents on the week to $2.96 a gallon, the highest since May 2018. nL1N2MX1NL
In East Atlanta, Georgia, Marcus Blash, the owner of a small trucking company, worried when he heard the news of the pipeline shutting down. His company doesn't have any ability to store fuel on site to hedge against prices.
"We pay at the pump," he said. "It hasn't hit us yet, but this is going to hurt big time."
If the disruption stretches on, fuel suppliers could ship by trucks and rail instead. The Department of Transportation announced emergency measures on Sunday, lifting driver restrictions on fuel haulers in 17 states affected by the shutdown. nW1N2KZ01E
U.S. fuel importers are also booking at least six tankers to ship gasoline from Europe to U.S. destinations following the attack. nL1N2MX0L4
Total SE TOTF.PA reduced gasoline production on Monday at its 225,500 barrel-per-day Port Arthur, Texas, refinery because the pipeline shutdown left it without a way to ship the gas, sources said. nL1N2MX1U7
(Reporting by Devika Krishna Kumar and Stephanie Kelly in New York, Rich McKay in Atlanta, Georgia; Additional reporting by Raphael Satter and Steve Holland in Washington, D.C., and Michelle Nichols in New York; Editing Bernadette Baum, Grant McCool and Cynthia Osterman)