THE US government updated its cybersecurity advisory on Iranian-linked cyberattacks targeting industrial control systems (ICS) made by companies such as Siemens, Schneider Electric, and Rockwell Automation. Initially released in April, the advisory highlighted that Iranian hackers conducted disruptive attacks on operational technology (OT) devices across various sectors, including government services and utilities.
The updated guidance from July details how attackers exploited vulnerabilities in programmable logic controllers (PLCs) and modified logic responsible for safe operations, jeopardizing infrastructure safety. The advisory reveals that hackers targeted specific PLC devices and programming software from notable vendors, demonstrating an advanced capability to disrupt critical systems.
Additionally, Iranian hacktivist groups like CyberAv3ngers and Handala have claimed responsibility for several attacks, signaling a growing threat to ICS security.