As a final year of university we built a system interacting with PLC and those systems are insecure by default. Usually the code is stored plaintext on the devi

As a final year of university we built a system interacting with PLC and those systems are insecure by default. Usually the code is stored plaintext on the device if you can speak their protocol. Some of those devices are connected to the internet for remote management. We were tasked to build an IIoT (industrial iot) to interact more securely with them and package that in a UI for fleet management and real time data with grafana. You can interact with most of them using modbus (over ethernet for newer models) to read and write memory directy. On top of that they have a proprietary protocol that I actually started reverse engineering to do remote updates but never finished it. I am not aware of anything open source for it meaning people still need to use the vendor crappy windows only GUI tool to update firmware. i expect this APT implemented part of that protocol too to mess with the device.