US Agencies Expand Warning on Iran-Linked Attacks Targeting OT Systems

· Original article ↗

Summary

CISA, the FBI and EPA expanded a warning about Iran-affiliated attacks on internet-facing OT, adding Schneider Electric and Siemens PLCs to the manufacturers targeted. The advisory reports operational disruption and financial losses and urges operators to secure PLCs.

Key points

  • The revised federal advisory adds observed targeting of Schneider Electric and Siemens PLCs to previously cited Rockwell Automation and Allen-Bradley systems.
  • The advisory describes malicious project-file interactions and manipulation of HMI and SCADA displays.
  • It says targeted organizations experienced operational disruption and financial loss; the article provides no details on specific attacks or threat groups.
  • Officials recommend restricting direct internet access to OT and ensuring PLCs are securely deployed.
  • CISA, the FBI and EPA expect pressure from Iran-affiliated attackers to continue.

Article Details

Event Type
Federal advisory update warning of Iran-affiliated attacks targeting internet-facing operational technology.
Impact
Reported incidents involved malicious project-file interactions and manipulation of HMI and SCADA displays, causing operational disruption and financial loss. The revised warning expands the manufacturers in scope to include Schneider Electric and Siemens PLCs, in addition to previously cited Rockwell Automation and Allen-Bradley systems.

Vendors

Countries

Industries

Related Articles