funsec mailing list archives

SCADA Stuff [Was: Re: GSS warns that hackers can now destroy hardware]


From: "Paul Ferguson" <fergdawg () netzero net>
Date: Fri, 28 Sep 2007 21:01:57 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Valdis.Kletnieks () vt edu wrote:

(Personally, I'm about 350 times more worried about utility failures
caused 
by worms accidentally propagating onto a SCADA net than I am about
intentional
attacks, if for no other reason than there's a lot more probing bots out
there
than there are actual cyberterrorists.  But that's just me.)


You mean like this? :-)

- From 2006:

[snip]

A foreign hacker who penetrated security at a Harrisburg, Pa., water
filtering plant is under investigation by the FBI for planting malicious
software capable of affecting the plant's water treatment operations, ABC
News has learned.

The hacker tried to covertly use the computer system as its own
distribution system for e-mails or pirated software, officials told ABC.

"The concern was high because it is a computer that controls an important
infrastructure system, and if, for some reason, it caused it to fail, it
would have disrupted service," said Special Agent Jerri Williams of the
FBI's Philadelphia field office.

The Columbus Day weekend intrusion is the fourth recorded cyber-attack on a
U.S. water supply in the past four years, according to the records of
WaterISAC, an industry information sharing and analysis center with members
from among more than 1,000 drinking water and wastewater systems in the
United States.

[snip]

More:
http://blogs.abcnews.com/theblotter/2006/10/hackers_penetra.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFG/WvBq1pz9mNUZTMRAgrlAJ9swWP02FJl7wkmkJRUkV2xXoRwRACg3laf
Au+b0z2MMb7cwF+BewiNx4s=
=vKwp
-----END PGP SIGNATURE-----

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/



_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: