{"id":88169,"date":"2021-08-27T17:05:17","date_gmt":"2021-08-27T15:05:17","guid":{"rendered":"http:\/\/www.reunion68.se\/?p=88169"},"modified":"2021-08-19T07:12:00","modified_gmt":"2021-08-19T05:12:00","slug":"10-05-66","status":"publish","type":"post","link":"https:\/\/www.reunion68.se\/?p=88169","title":{"rendered":"Iranian cyberattacks threaten our daily operations – opinion"},"content":{"rendered":"
\"\"<\/a>Iranian cyberattacks threaten our daily operations – opinion<\/a><\/strong><\/span><\/h5>\n

ROTEM BAR<\/strong><\/span><\/p>\n

\n
According to a Sky News report based on classified documents allegedly from Iran, a cyber attack could sink a cargo ship or blow up a fuel pump at a gas station.<\/strong><\/h5>\n

UNTIL NOW, building owners did not add nation-states into the reference threat options, a mistake that needs to be addressed. \/ (photo credit: KACPER PEMPEL \/ REUTERS)<\/em><\/span><\/p>\n

According to a Sky News report based on classified documents allegedly from Iran, a cyber attack could sink a cargo ship or blow up a fuel pump at a gas station.<\/span><\/p>\n

The Sky News report also details how satellite devices are used by the shipping industry globally and how a computer-based system controls lighting, heating, and ventilation in smart buildings worldwide.<\/span><\/p>\n

According to a security source with knowledge of five research documents, the 57-page collection was gathered by an offensive cyber unit called Shahid Kaveh, part of Iran\u2019s terrorist-linked Islamic Revolutionary Guard Corps (IRGC).<\/span><\/p>\n

\u201cThey are creating a target bank to be used whenever they see fit,\u201d said the source, who requested to remain anonymous for the documents to be discussed directly.<\/span><\/p>\n

Almost all of the files include a quote that appears to be from Iran\u2019s Supreme Leader Ali Khamenei: \u201cThe Islamic Republic of Iran must become among the world\u2019s most powerful in the area of cyber.\u201d Sources describe this quote as something like a \u201ccommander\u2019s intent statement.\u201d<\/span><\/p>\n

The front pages of only two of the reports mention the date of completion.<\/span>
\nThe first examines what is known as a building management system \u2013 the computer technology that controls things like lights, heating, and ventilation in smart buildings \u2013 from November 19, 2020.<\/span><\/p>\n

Companies that provide these services are listed in the documents. Several manufacturers were involved, including Honeywell in the United States; Schneider Electric, a French electrical equipment company; Siemens, a German company; and KMC Controls, another US company.<\/span><\/p>\n

Another report, which deals with a German company called WAGO, which makes electrical components for the industrial automation market, is dated April 19, 2020 and is the most comprehensive.<\/span><\/p>\n

The file examined vulnerabilities in a programmable logic controller or PLC \u2013 a computer control system.<\/span><\/p>\n

\u201cContinuing the investigation, to use these processes, we noticed the vulnerabilities within these systems are irreparable. If there is an attack, the damage will not be easy to fix,\u201d the report said.<\/span><\/p>\n

\u201cTherefore, compared to other PLC brands, this brand is impenetrable once connected online. When online, the infrastructure and intelligence on engineering cannot be reached and cannot be lost.<\/span><\/p>\n

\u201cFor our benefit, the best situation is for the PLC not to work as intended, and for that to happen, a project must be written in \u2018ladder\u2019 language and have multiple exits, as many as possible. But the problem with this project is that we wouldn\u2019t be able to assess the damage caused. The other option is to assess the PLC\u2019s and software\u2019s weak points and dangerous points to attack our target. This option needs separate investigation and research before we can find the weak points.\u201d<\/span><\/p>\n

The Iranian attack Unit 13 is not working in a vacuum. There are many attack groups for nations, companies, and criminals, with the last two seeking money as an incentive. Governments do not follow those rules, and their agenda might not be as clear.<\/span><\/p>\n

This is why documents describing such targets with attack openness, as those documents describe, are rarely published or exposed in such a manner.<\/span>
\nThe document provides a glimpse into the attackers\u2019 way of thinking regarding the targets\u2019 owners and the possible attack vectors and destruction capabilities required to harm the target.<\/span><\/p>\n

Until now, smart building owners did not add nation-states into the reference threat options, and by closely examining the reports, it\u2019s clear that this was a mistake that needs to be addressed.<\/span><\/p>\n

WAGO, a German manufacturer of industrial automation, was one of the attack vectors described in the report. Many types of automation equipment are used in the industrial automation market and with Cloud-PLC service.<\/span><\/p>\n

Many of the devices used in industrial automation and building automation are not updated. Vulnerability issues are not addressed, allowing the Iranians and other attackers to continue and hold ground on the victims\u2019 systems for many years.<\/span><\/p>\n

Industrial and building management systems are a key to ensuring safety. With millions of systems globally, those attack groups pose a significant risk to the modern life that we get used to in our daily lives.<\/span><\/p>\n

\n

The writer is a senior ICS\/OT Division manager, BDO Israel.<\/strong><\/em><\/span><\/p>\n

\n
\n
\n
\n

Zawarto\u015b\u0107 publikowanych artyku\u0142\u00f3w i materia\u0142\u00f3w nie reprezentuje pogl\u0105d\u00f3w ani opinii Reunion’68,<\/em>
\nani te\u017c webmastera Blogu Reunion’68, chyba ze jest to wyra\u017anie zaznaczone.
\nTwoje uwagi, linki, w\u0142asne artyku\u0142y lub wiadomo\u015bci prze\u015blij na adres:
\n<\/em>webmaster@reunion68.com<\/span><\/a><\/em><\/strong><\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n

\n","protected":false},"excerpt":{"rendered":"

Iranian cyberattacks threaten our daily operations – opinion ROTEM BAR According to a Sky News report based on classified documents allegedly from Iran, a cyber attack could sink a cargo ship or blow up a fuel pump at a gas station. UNTIL NOW, building owners did not add nation-states into the reference threat options, a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[3],"tags":[26,24],"_links":{"self":[{"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/posts\/88169"}],"collection":[{"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=88169"}],"version-history":[{"count":6,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/posts\/88169\/revisions"}],"predecessor-version":[{"id":88465,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=\/wp\/v2\/posts\/88169\/revisions\/88465"}],"wp:attachment":[{"href":"https:\/\/www.reunion68.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=88169"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=88169"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.reunion68.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=88169"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}