Iranian hackers hit critical infrastructure via exposed PLCs

Iranian hackers are targeting internet-exposed industrial systems from brands like Rockwell Automation, Schneider Electric, and Siemens, as per a warning from the Cybersecurity and Infrastructure Security Agency (CISA). The hackers have conducted operations that resulted in disruptions in critical infrastructure sectors, including government services and water systems.

The advisory indicated that these cyber actors are manipulating Programmable Logic Controllers (PLCs) and Supervisory Control and Data Acquisition (SCADA) systems, potentially causing operational disruption and financial loss. CISA offered mitigation recommendations, including adhering to manufacturer guidelines, securing PLCs from direct internet exposure, and monitoring logs for suspicious activity.