What stops attackers wrecking industrial plants is knowing how
Overview
Engineers at an Israeli food company faced a major setback when an intruder tampered with their refrigeration system. The attacker switched the gas cooler and receiver valves to manual and left them open, causing liquid carbon dioxide to flood the compressors and ultimately destroying them. The repair process took a week, as the new compressors were incompatible with the existing system, requiring a complete rework and gas recharge. This incident is part of a larger trend, with Kaspersky ICS CERT reporting around forty similar attacks recently. Such breaches highlight the vulnerabilities in industrial control systems and the potential for significant operational disruptions.
Key Takeaways
- Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
- Affected Systems: Refrigeration systems at an Israeli food producer
- Action Required: Implement stricter access controls and monitoring on industrial control systems; consider regular security assessments and incident response planning.
- Timeline: Ongoing since recent months
Original Article Summary
Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The replacement units did not match the originals, so the whole system had to be reworked and recharged with gas. That incident is one of roughly forty in Kaspersky ICS CERT’s quarterly roundup of attacks on … More → The post What stops attackers wrecking industrial plants is knowing how appeared first on Help Net Security.
Impact
Refrigeration systems at an Israeli food producer
Exploitation Status
This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.
Timeline
Ongoing since recent months
Remediation
Implement stricter access controls and monitoring on industrial control systems; consider regular security assessments and incident response planning.
Additional Information
This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.
Related Topics: This incident relates to Kaspersky.