|
2023-12-03 Cyber
|
|
Iranian cyber attack targets Israeli tech used by several US bodies
|
 Something to be aware of if you’re in the cybersecurity biz. [IsraelTimes] Breaches affect Pennsylvania water authority, other utilities and aquarium using device that manages water processes; hackers’ message says Israeli-made equipment ’a legal target’
A small western Pennsylvania water authority was just one of multiple organizations breached in the United States by Iran-affiliated hackers who targeted a specific industrial control device because it is Israeli-made, US and Israeli authorities say.
"The victims span multiple US states," the FBI, the Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency, known as CISA, as well as Israel’s National Cyber Directorate said in an advisory emailed to The News Agency that Dare Not be Named late Friday.
Continued from Page 2
They did not say how many organizations were hacked or otherwise describe them.
Matthew Mottes, the chairman of the Municipal Water Authority of Aliquippa, which discovered it had been hacked on November 25, said Thursday that federal officials had told him the same group also breached four other utilities and an aquarium.
F-73 pro-forma paragraph here: Cybersecurity experts say that while there is no evidence of Iranian involvement in the October 7 attack on Israel
— in which 3,000 Hamas
 ...the well-beloved offspring of the Moslem Brotherhood,...
-led forces of Evil from Gazoo
...Hellhole adjunct to Israel and Egypt's Sinai Peninsula, inhabited by Gazooks. The place was acquired in the wake of the 1967 War and then presented to Paleostinian control in 2006 by Ariel Sharon, who had entered his dotage. It is currently ruled with an iron fist by Hamas with about the living conditions you'd expect. It periodically attacks the Hated Zionist Entity whenever Iran needs a ruckus created or the hard boyz get bored, getting thumped by the IDF in return. The ruling turbans then wave the bloody shirt and holler loudly about oppression and disproportionate response ...
slaughtered 1,200 people in southern Israel, triggering the Israel-Hamas war — they expected state-backed Iranian hackers and pro-Paleostinian hacktivists to step up cyberattacks on Israel and its allies in its aftermath. And indeed that has happened.
The multiagency advisory explained what CISA had not when it confirmed the Pennsylvania hack on Wednesday: that other industries outside water and water-treatment facilities use the same equipment — Vision Series programmable logic controllers made by Unitronics — and were also potentially vulnerable.
Good to know. Those industries include "energy, food and beverage manufacturing and healthcare," the advisory said. The devices regulate processes including pressure, temperature, and fluid flow.
The Aliquippa hack prompted workers to temporarily halt pumping in a remote station that regulates water pressure for two nearby towns, leading crews to switch to manual operation. The hackers left a digital calling card on the compromised device saying all Israeli-made equipment is "a legal target."
The multiagency advisory said it was not known if the hackers had tried to penetrate deeper into breached networks. The access they did get enabled "more profound cyber physical effects on processes and equipment," it said.
The advisory said the hackers, who call themselves "Cyber Av3ngers," are affiliated with Iran’s Islamic Revolutionary Guards Corps, which the US designated as a foreign terrorist organization in 2019. The group targeted the Unitronics devices at least since November 22, it said.
An online search Saturday with the Shodan service identified more than 200 such internet-connected devices in the US and more than 1,700 globally.
The advisory noted that Unitronics devices ship with a default password, a practice experts discourage as it makes them more vulnerable to hacking. Best practices call for devices to require a unique password to be created out of the box. It said the hackers likely accessed affected devices by "exploiting cybersecurity weaknesses, including poor password security and exposure to the internet."
Experts say many water utilities have paid insufficient attention to cybersecurity.
In response to the Aliquippa hack, three Pennsylvania congressmen asked the US Justice Department in a letter to investigate. Americans must know their drinking water and other basic infrastructure is safe from "nation-state adversaries and terrorist organizations," US Sens. John Fetterman and Bob Casey and US Rep. Chris Deluzio said. Cyber Av3ngers claimed in an October 30 social media post to have hacked 10 water treatment stations in Israel, though it is not clear if they shut down any equipment.
Since the beginning of the Israel-Hamas war, the group has expanded and accelerated targeting Israeli critical infrastructure, said Check Point’s Sergey Shykevich. Iran
...a theocratic Shiite state divided among the Medes, the Persians, and the (Arab) Elamites. Formerly a fairly civilized nation ruled by a Shah, it became a victim of Islamic revolution in 1979. The nation is today noted for spontaneously taking over other countries' embassies, maintaining whorehouses run by clergymen, involvement in international drug trafficking, and financing sock puppet militias to extend the regime's influence. The word Iran is a cognate form of Aryan. The abbreviation IRGC is the same idea as Stürmabteilung (or SA). The term Supreme Guide is a the modern version form of either Duce or Führer or maybe both. They hate Jews Zionists Jews. Their economy is based on the production of oil and vitriol...
and Israel were engaged in low-level cyberconflict prior to October 7. Unitronics has not responded to the AP queries about the hacks.
The attack came less than a month after a federal appeals court decision prompted the EPA to rescind a rule that would have obliged US public water systems to include cybersecurity testing in their regular federally mandated audits. The rollback was triggered by a federal appeals court decision in a case brought by Missouri, Arkansas, and Iowa, and joined by a water utility trade group.
The Biden administration has been trying to shore up the cybersecurity of critical infrastructure — more than 80 percent of which is privately owned — and has imposed regulations on sectors including electric utilities, gas pipelines, and nuclear facilities. But many experts complain that too many vital industries are permitted to self-regulate.
|
Posted by trailing wife 2023-12-03 2023-12-03 00:54||
||
Front Page|| [11138 views ]
Top
File under: Govt of Iran Proxies
|
|
Posted by Grom the Reflective 2023-12-03 02:03||
2023-12-03 02:03||
Front Page
Top
|
|
Posted by Jerens Black9355 2023-12-03 08:11||
2023-12-03 08:11||
Front Page
Top
|
|
09:43 Mullah Richard
09:27 Warthog
09:11 Mercutio
09:07 AlmostAnonymous5839
08:52 Matt
08:24 Matt
08:20 SteveS
07:43 Procopius2k
07:42 BrerRabbit
07:42 Procopius2k
07:39 Procopius2k
07:36 Procopius2k
07:35 Procopius2k
07:34 trailing wife
07:31 Procopius2k
07:30 NN2N1
07:22 NN2N1
07:18 trailing wife
07:14 Richard Aubrey
07:10 NN2N1
07:09 Besoeker
07:03 NN2N1
06:58 NN2N1
06:58 Besoeker
|
