A cyber attack could cause serious damage to a production plant or a facility, we discussed several times this attack scenario that represents a nightmare for security experts and Intelligence agencies. The news of the day is that a German steel factory suffered massive damage caused by a cyber attack on its network. According to the German Government, unknown hackers have infiltrated the production networks gaining the control of a blast furnace, as reported in the annual IT security report.
The attack started with a spear phishing email that was sent by attackers to the factory’s office networks, the threat actor once obtained the access to internal system moved its activity to production networks that was compromised too.
Once accessed the production networks the systems were compromised by the attackers and the report states that single components inside the plant started to fail frequently showing several anomalies.
The continuous failures observed by the internal staff caused a serious anomaly to one of the plant’s blast furnaces, the expert report that it was impossible to shut down it in a controlled manner.
The cyber attack on the system controlling the blast furnaces resulted in “massive damage to plant,” as explained in the document issued by the BSI. The experts consider the attack very sophisticated, the document describes the technical skills of the attacker as “very advanced.”
The cyber attack is considered by experts sophisticated because the attackers have shown a deep knowledge of a variety of different industrial components that were hacked in the incursion.
Cyber weapons are a reality and other cyber attacks could cause serious damage in the next future.
(Security Affairs – Cyber weapon, cyber attack)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.