#industroyer — Public Fediverse posts

#KRITIS Sektor #Energie

"A new study from UC Santa Cruz looks into these unique attacks dubbed #Industroyer One (2016) and Two (2022) and analyzes how they operated and interacted with the physical power system equipment"
https://i-hls.com/archives/123920

Unearthed: CosmicEnergy, malware for causing Kremlin-style power disruptions - Enlarge (credit: Getty Images)

Researchers have uncovered malw... - https://arstechnica.com/?p=1942377 #cosmicenergy #industroyer #powergrids #security #sandworm #biz&it

There's an entire school of thought for #ICS #OT security where the ultimate issue at stake is sensor integrity and compromise.

You can tell this school of thought is intellectually bankrupt because they focus on the incredibly hard problem (in terms of access of deeply-embedded devices and number as these will be numerous and overlapping in scope), instead of looking at actual abuse of sensor technology: by compromising the endpoint or midpoint to spoof, replay, or otherwise manipulate the telemetry stream, while leaving the sensor itself alone.

This is what #Stuxnet did. This is kinda what #Triton tried to do. Arguably it alings with the #Siprotec relay DoS in #Industroyer. Yet because of commercial interests (or maybe lack of analysis and creativity) we observe a focus on the hardest possible avenue for corrupting #OT ecosystem integrity - compromising sensors - while ignoring the very real AND REALIZED threat of telemetry abuse and spoofing.

2016, #Industroyer ciblant les centrales éléctriques ukrainiennes, le logiciel malaveillant commence à avoir des effets physiques, pas seulement digitaux (oui, je trolle).
#Coriin