Security News > 2020 > December > Iranian Hackers Access Unprotected ICS at Israeli Water Facility
A group of Iranian hackers recently posted a video showing how they managed to access an industrial control system at a water facility in Israel.
"This gave the attackers easy access to the system and the ability to modify any value in the system, allowing them, for example, to tamper with the water pressure, change the temperature and more. All the adversaries needed was a connection to the world-wide-web, and a web browser," OTORIO said in a blog post.
The hackers published their video on December 1 and by the next day the owner of the compromised system made some changes to prevent access to the HMI without authentication.
The Iranian hacker group that targeted this water facility in Israel is called the "Unidentified TEAM" and it does not appear to possess deep capabilities or knowledge for targeting industrial systems.
OTORIO's Even told SecurityWeek that Israel's water and water treatment facilities are generally secure, but noted that private facilities such as the one targeted earlier this month are "Very loosely regulated and can be an easy target for attackers."
News URL
Related news
- Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations (source)
- Iranian hackers charged for ‘hack-and-leak’ plot to influence election (source)
- Iranian hackers now exploit Windows flaw to elevate privileges (source)
- Iranian hackers act as brokers selling critical infrastructure access (source)
- Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks (source)