A preliminary analysis by U.S. investigators concluded that Iranian hackers were probably behind a cyberattack targeting dozens of municipal water systems in Minnesota this week, an escalation in Iran’s retaliatory moves sprouting from the war.
Tenable, the security firm investigating around 30 cyberattacks on water management infrastructure from Sunday to Monday, was careful not to explicitly attribute the attack to any one group, but noted that the attack pattern was consistent with that of the faux hacktivist group “CyberAv3ngers,” a group the U.S. government says is a front for the Islamic Revolutionary Guard Corps Cyber-Electronic Command. The cyberattacks were aimed at wells and treatment plants, specifically targeting automated systems and plants’ computer systems.
Recommended Stories
In all cases, the attacks didn’t affect the quality of the water supplies. The most severe targeted the 1,700-member community of Braham, disabling its well and water treatment plant’s computerized operating controls for about two hours. The city of Plymouth’s IT division disconnected its cellular-connected equipment at two water towers and multiple wastewater stations in fear of a wider compromise, fixing it with manual procedures. Some automated water utility controls were compromised in South St. Paul, while Maple Plain declared a local state of emergency to manage a similar attack.
Tenable noted the “significant” timing of the attack, coming after an advisory just four days prior, “warning that Iranian-affiliated actors had been compromising internet-connected PLCs across U.S. water, energy, and government sectors. The advisory documented confirmed disruptions and financial losses at multiple organizations.”
U.S. and state officials told the New York Times that the attribution to Iranian hackers was preliminary.
In Braham, the attacks have already become a campaign issue. Mayor Nate George, the Republican candidate for Minnesota state auditor, added a statement on the matter to his campaign website.
“This attack on critical public infrastructure should be a warning to policymakers in St. Paul. Minnesota’s local governments are expected to defend essential systems against foreign adversaries and sophisticated criminals, often with limited staff, aging technology and inadequate resources,” he said.
US MILITARY WARNS TROOPS AGAINST FILMING AFTERMATH OF IRAN STRIKES
“Fortunately, Braham was prepared. Strong internal controls, routine monitoring, system backups and the swift response of our city employees allowed us to identify, contain and resolve this attack without interrupting water service,” George added.
U.S. water systems are increasingly a favorite target of malicious foreign-affiliated hackers, as many have outdated cybersecurity systems and are particularly vulnerable to attack.
