4 ms·
> It seems the activists lacked either the knowledge of SCADA systems or the intent to do any harm. So it's a kid, not a state.
by mchahn 11y ago
> It seems the activists lacked either the knowledge of SCADA systems or the intent to do any harm.
So it's a kid, not a state.
- ChuckMcM 11y agoNot necessarily, if you were probing you would do so in a way that didn't indicate your true intentions.
- ams6110 11y agoSounds like it started with a pretty simple SQL injection attack, any script kiddie could have done that. Then poking around they found something like control_system_passwords.txt somewhere on the web server and went from there. Not exactly state-actor skilz required.
- wepple 11y agoIf it was compromised via SQLi, it's likely a lower-tech group. But even fairly advanced attackers don't necessarily know their way around SCADA systems. nor have the resources to take control of often very tech-specific PLC's