Threats Tagged 'plc exploitation'

Multiple U.S. federal agencies have issued a joint advisory about an ongoing campaign actively exploiting programmable logic controllers (PLCs) in critical infrastructure sectors such as government facilities, water systems, and energy. Attackers scan for internet-exposed industrial control systems and use legitimate engineering software with valid credentials to appear as authorized technicians. They then alter controller logic and manipulate operator displays to conceal their activities. This campaign affects equipment from Rockwell Automation, Schneider Electric, and Siemens. Unlike a prior 2023 campaign, this activity has caused confirmed operational disruptions and financial losses. The exploitation targets architectural weaknesses and uses common industrial communication ports for access.

MediumMalwareUnited States#industrial control systems#critical infrastructure#water facilities