4 ms·
It would be funny in this case if it was really just an open SCADA for their entire power grid that they clicked “off”, then “on”.
by buildbot 9mo ago
It would be funny in this case if it was really just an open SCADA for their entire power grid that they clicked “off”, then “on”.
- yabones 9mo agoThe reality probably isn't far off... I know in the past the "breaches of critical infrastructure" breathlessly reported by the media have actually just been wide-open SNMPv2 services using the default community string. I'm sure something similar happened here. Turns out you can just connect to port 161, press "power off," and be reported in the news as an "advanced persistent threat actor"
- KaiserPro 9mo agoI work in electricity, it wouldn't be one, but yeah essentially it's probably an unpatched RDP/vnc/remote desktop exploit. Or the password is contraseña123
- bflesch 9mo agoI can see how a team of cyber bureaucrats is required to type in the fancy n you are using in your password. At least it is safe against brute forcing attempts with standard settings.
- robocat 9mo agoAnd remember that ñ on a traditional system is a single byte $F1, not one of those crazy kids-these-days multibyte codes like $C3 $B1
- qingcharles 9mo agoIs it that, or is it more likely they paid some anti-Maduro electric company worker to walk into HQ and shove a dongle in the back of a PC somewhere on their internal network, ala Stuxnet?