Like the 2015 Ukraine attack, hacktivist-class attackers steal remote-access passwords, log in and observe the operator using ICS HMI to learn how the screens work. The attackers eventually take control of the HMI and mis-operate the physical process.
An attack group similar to the “Shadow Brokers” steals a list of zero days from a nation-state adversary and sells the list to an organized crime group. That group creates autonomous ransomware that jumps through firewalls via encrypted connections to file shares, causing an emergency shutdown and physical damage.
An attacker launches a phishing attack and plants RAT malware on the IT network. They use the RAT to steal credentials and gain remote access to the ICS and demand ransom
An engineer searching for information from an ICS-connected computer accidentally downloads ransomware resulting in an emergency shutdown Much like the WannaCry ransomware.
An unhappy IT Insider shoulder-surfs remote access credentials entered by an ICS support technician. The insider uses the credentials to trigger a partial shutdown
A disgruntled ICS technician steals passwords, logs in to equipment controlling the plant, and triggers a shut-down – much like Maroochy Shire incident
Press Release: Waterfall security announces the industrial security institute. A video series focused on industrial cybersecurity topics and education
English
Français
Español
עברית
Deutsch
日本語
한국어
中文
اَلْعَرَبِيَّةُ
