SoylentNews
SoylentNews is people
https://soylentnews.org/

Title    "Game-Changing" Attack on Critical Infrastructure Site Causes Outage
Date    Friday December 15 2017, @04:26PM
Author    janrinok
Topic   
from the ooops,-there-goes-another-one dept.
https://soylentnews.org/article.pl?sid=17/12/15/088248

MrPlow writes:

Submitted via IRC for SoyCow1984

Source: https://arstechnica.com/information-technology/2017/12/game-changing-attack-on-critical-infrastructure-site-causes-outage/

Hackers who may have been working on behalf of a nation recently caused an operational outage at a critical-infrastructure site, researchers said Thursday. The attackers did so by using a novel piece of malware to target the system that prevents health- and life-threatening accidents.

The malware was most likely designed to cause physical damage inside the unnamed site, researchers from the Mandiant division of security firm FireEye said in a report. It worked by targeting a safety instrumented system, which the targeted facility and many other critical infrastructure sites use to prevent unsafe conditions from arising. The malware has been alternately named Triton and Trisis, because it targeted the Triconex product line made by Schneider Electric.

"Mandiant recently responded to an incident at a critical infrastructure organization where an attacker deployed malware designed to manipulate industrial safety systems," Mandiant researchers wrote. "The targeted systems provided emergency shutdown capability for industrial processes. We assess with moderate confidence that the attacker was developing the capability to cause physical damage and inadvertently shutdown operations."

The accidental outage was likely the result of the Triconex SIS, or "safety instrumented system." The SIS shut down operations when it experienced an error that occurred as the hackers were performing reconnaissance on the facility. Although the hackers were likely seeking the ability to cause physical damage inside the facility, the November shutdown was likely not deliberate.


Original Submission

Links

  1. "MrPlow" - https://soylentnews.org/~MrPlow/
  2. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=23825

© Copyright 2024 - SoylentNews, All Rights Reserved

printed from SoylentNews, "Game-Changing" Attack on Critical Infrastructure Site Causes Outage on 2024-03-29 10:35:02