Please ensure Javascript is enabled for purposes of website accessibility

West Bank Town Becomes ‘Big Prison’ as Israel Fences It In

2 days ago

Trump Says He’s Willing to Let Migrant Farm Laborers Stay in US

2 days ago

US Electric Vehicle Tax Breaks Will Expire on Sept. 30

3 days ago

Eyeing Arctic Dominance, Trump Bill Earmarks $8.6 Billion for US Coast Guard Icebreakers

3 days ago

Trump’s Sweeping Tax-Cut and Spending Bill Wins Congressional Approval

3 days ago

Americans Celebrate Their Independence With Record-Breaking Travel Numbers

3 days ago

US Supreme Court to Decide Legality of Transgender School Sports Bans

3 days ago

Nvidia Set to Become the World’s Most Valuable Company in History

3 days ago

Poll: 41% in US ‘Extremely Proud’ to Be American, Near Historic Low

3 days ago
Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say
gvw_ap_news
By Associated Press
Published 2 years ago on
December 4, 2023

Share

HARRISBURG, Pa. — A small western Pennsylvania water authority was just one of multiple organizations breached in the United States by Iran-affiliated hackers who targeted a specific industrial control device because it is Israeli-made, U.S. and Israeli authorities say.

“The victims span multiple U.S. states,” the FBI, the Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency, known as CISA, as well as Israel’s National Cyber Directorate said in an advisory emailed to The Associated Press late Friday.

They did not say how many organizations were hacked or otherwise describe them.

Matthew Mottes, the chairman of the Municipal Water Authority of Aliquippa, which discovered it had been hacked on Nov. 25, said Thursday that federal officials had told him the same group also breached four other utilities and an aquarium.

Cybersecurity experts say that while there is no evidence of Iranian involvement in the Oct. 7 attack into Israel by Hamas that triggered the war in Gaza they expected state-backed Iranian hackers and pro-Palestinian hacktivists to step up cyberattacks on Israeli and its allies in its aftermath. And indeed that has happened.

The multiagency advisory explained what CISA had not when it confirmed the Pennsylvania hack on Wednesday — that other industries outside water and water-treatment facilities use the same equipment — Vision Series programmable logic controllers made by Unitronics — and were also potentially vulnerable.

Those industries include “energy, food and beverage manufacturing and healthcare,” the advisory says. The devices regulate processes including pressure, temperature and fluid flow.

The Aliquippa hack promoted workers to temporarily halt pumping in a remote station that regulates water pressure for two nearby towns, leading crews to switch to manual operation. The hackers left a digital calling card on the compromised device saying all Israeli-made equipment is “a legal target.”

The multiagency advisory said it was not known if the hackers had tried to penetrate deeper into breached networks. The access they did get enabled “more profound cyber physical effects on processes and equipment,” it said.

Hackers Affiliated With Revolutionary Guards

The advisory says the hackers, who call themselves “Cyber Av3ngers,” are affiliated with Iran’s Islamic Revolutionary Guards Corps, which the U.S. designated as a foreign terrorist organization in 2019. The group targeted the Unitronics devices at least since Nov. 22, it said.

An online search Saturday with the Shodan service identified more than 200 such internet-connected devices in the U.S. and more than 1,700 globally.

The advisory notes that Unitronics devices ship with a default password, a practice experts discourage as it makes them more vulnerable to hacking. Best practices call for devices to require a unique password to be created out of the box. It says the hackers likely accessed affected devices by “exploiting cybersecurity weaknesses, including poor password security and exposure to the internet.”

Experts say many water utilities have paid insufficient attention to cybersecurity.

In response to the Aliquippa hack, three Pennsylvania congressmen asked the U.S. Justice Department in a letter to investigate. Americans must know their drinking water and other basic infrastructure is safe from “nation-state adversaries and terrorist organizations,” U.S. Sens. John Fetterman and Bob Casey and U.S. Rep. Chris Deluzio said. Cyber Av3ngers claimed in an Oct. 30 social media post to have hacked 10 water treatment stations in Israel, though it is not clear if they shut down any equipment.

Since the beginning of the Israel-Hamas war, the group has expanded and accelerated targeting Israeli critical infrastructure, said Check Point’s Sergey Shykevich. Iran and Israel were engaged in low-level cyberconflict prior to the Oct. 7. Unitronics has not responded to the AP queries about the hacks.

The attack came less than a month after a federal appeals court decision prompted the EPA to rescind a rule that would have obliged U.S public water systems to include cybersecurity testing in their regular federally mandated audits. The rollback was triggered by a federal appeals court decision in a case brought by Missouri, Arkansas and Iowa, and joined by a water utility trade group.

The Biden administration has been trying to shore up cybersecurity of critical infrastructure — more than 80% of which is privately owned — and has imposed regulations on sectors including electric utilities, gas pipelines and nuclear facilities. But many experts complain that too many vital industries are permitted to self-regulate.

RELATED TOPICS:

DON'T MISS

What Are Fresno Real Estate Experts Predicting for 2025 and Beyond?

DON'T MISS

First California EV Mandates Hit Automakers This Year. Most Are Not Even Close

DON'T MISS

How Trump’s ‘Big, Beautiful Bill’ Will Make China Great Again

DON'T MISS

What’s Caitlin Clark Worth to the WNBA? A Lot More Than Her $78,066 Salary.

DON'T MISS

Trump to Sign Tax-Cut and Spending Bill in July 4 Ceremony

DON'T MISS

Madre Fire Spurs Evacuations Across 3 Counties, Grows to More Than 70,000 Acres

DON'T MISS

Clovis, Sanger, Madera, and Bass Lake Will Light the Sky With Fireworks Shows Tonight

DON'T MISS

Oil Dips Ahead of Expected OPEC+ Output Increase

DON'T MISS

613 Killed at Gaza Aid Distribution Sites, Near Humanitarian Covoys, Says UN

DON'T MISS

Fresno County Authorities Investigating Suspicious Death of Transient Man

DON'T MISS

West Bank Town Becomes ‘Big Prison’ as Israel Fences It In

DON'T MISS

Israeli Military Kills 20 in Gaza as Trump Awaits Hamas Reply to Truce Proposal

UP NEXT

West Bank Town Becomes ‘Big Prison’ as Israel Fences It In

UP NEXT

Israeli Military Kills 20 in Gaza as Trump Awaits Hamas Reply to Truce Proposal

UP NEXT

Russia Pounds Kyiv With Largest Drone Attack, Hours After Trump-Putin Call

UP NEXT

Markets’ 90-Day Tariff Pause Rollercoaster Nears an Uncertain End

UP NEXT

Eyeing Arctic Dominance, Trump Bill Earmarks $8.6 Billion for US Coast Guard Icebreakers

UP NEXT

Colombia President Recalls Ambassador to US

UP NEXT

US-Backed 60-Day Gaza Ceasefire Envisions Gradual Return of Hostages, Official Says

UP NEXT

Americans Celebrate Their Independence With Record-Breaking Travel Numbers

UP NEXT

US Paves Way to Resume Ethane Exports to China Amid Trade Truce

UP NEXT

US Imposes New Sanctions Targeting Iran Oil Trade, Hezbollah, Treasury Dept Says

Madre Fire Spurs Evacuations Across 3 Counties, Grows to More Than 70,000 Acres

2 days ago

Clovis, Sanger, Madera, and Bass Lake Will Light the Sky With Fireworks Shows Tonight

2 days ago

Oil Dips Ahead of Expected OPEC+ Output Increase

2 days ago

613 Killed at Gaza Aid Distribution Sites, Near Humanitarian Covoys, Says UN

2 days ago

Fresno County Authorities Investigating Suspicious Death of Transient Man

2 days ago

West Bank Town Becomes ‘Big Prison’ as Israel Fences It In

2 days ago

Israeli Military Kills 20 in Gaza as Trump Awaits Hamas Reply to Truce Proposal

2 days ago

Valley Crime Stoppers’ Most Wanted Person of the Day: Rachelle Maria Blanco

2 days ago

Russia Pounds Kyiv With Largest Drone Attack, Hours After Trump-Putin Call

2 days ago

Boxer Chavez Jr Expected to Be Deported to Mexico to Serve Sentence, Mexican President Says

2 days ago

How Trump’s ‘Big, Beautiful Bill’ Will Make China Great Again

Can you hear it — that loud roar coming from the East? It’s the sound of 1.4 billion Chinese laughing at us. Thomas L. Friedman The New Yo...

23 hours ago

Solar Farm in Riesel, Texas
23 hours ago

How Trump’s ‘Big, Beautiful Bill’ Will Make China Great Again

Caitlin Clark Signs T-Shirt
23 hours ago

What’s Caitlin Clark Worth to the WNBA? A Lot More Than Her $78,066 Salary.

President Donald Trump speaks during a press conference in the Roosevelt Room at the White House in Washington, D.C., U.S., May 12, 2025. (Reuters File)
2 days ago

Trump to Sign Tax-Cut and Spending Bill in July 4 Ceremony

The Madre Fire burning near New Cuyama has scorched 70,801 acres as of Friday, July 4, 2025, afternoon, making it California’s largest wildfire of the year, with only 10% containment and multiple evacuation zones in place. (CalFire)
2 days ago

Madre Fire Spurs Evacuations Across 3 Counties, Grows to More Than 70,000 Acres

2 days ago

Clovis, Sanger, Madera, and Bass Lake Will Light the Sky With Fireworks Shows Tonight

A pumpjack operates at the Vermilion Energy site in Trigueres, France, June 14, 2024. (Reuters File)
2 days ago

Oil Dips Ahead of Expected OPEC+ Output Increase

Palestinians gather to collect what remains of relief supplies from the distribution center of the U.S.-backed Gaza Humanitarian Foundation, in Rafah, in the southern Gaza Strip, June 5, 2025. (Reuters File)
2 days ago

613 Killed at Gaza Aid Distribution Sites, Near Humanitarian Covoys, Says UN

Billy Wayne Sinisgalli, a 54-year-old transient known locally as Wayne, was found dead along a rural Fresno road Wednesday in what authorities are investigating as a suspicious death. (Fresno County SO)
2 days ago

Fresno County Authorities Investigating Suspicious Death of Transient Man

Help continue the work that gets you the news that matters most.

Search

Send this to a friend