Please ensure Javascript is enabled for purposes of website accessibility
Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say
gvw_ap_news
By Associated Press
Published 1 year ago on
December 4, 2023

Share

HARRISBURG, Pa. — A small western Pennsylvania water authority was just one of multiple organizations breached in the United States by Iran-affiliated hackers who targeted a specific industrial control device because it is Israeli-made, U.S. and Israeli authorities say.

“The victims span multiple U.S. states,” the FBI, the Environmental Protection Agency, the Cybersecurity and Infrastructure Security Agency, known as CISA, as well as Israel’s National Cyber Directorate said in an advisory emailed to The Associated Press late Friday.

They did not say how many organizations were hacked or otherwise describe them.

Matthew Mottes, the chairman of the Municipal Water Authority of Aliquippa, which discovered it had been hacked on Nov. 25, said Thursday that federal officials had told him the same group also breached four other utilities and an aquarium.

Cybersecurity experts say that while there is no evidence of Iranian involvement in the Oct. 7 attack into Israel by Hamas that triggered the war in Gaza they expected state-backed Iranian hackers and pro-Palestinian hacktivists to step up cyberattacks on Israeli and its allies in its aftermath. And indeed that has happened.

The multiagency advisory explained what CISA had not when it confirmed the Pennsylvania hack on Wednesday — that other industries outside water and water-treatment facilities use the same equipment — Vision Series programmable logic controllers made by Unitronics — and were also potentially vulnerable.

Those industries include “energy, food and beverage manufacturing and healthcare,” the advisory says. The devices regulate processes including pressure, temperature and fluid flow.

The Aliquippa hack promoted workers to temporarily halt pumping in a remote station that regulates water pressure for two nearby towns, leading crews to switch to manual operation. The hackers left a digital calling card on the compromised device saying all Israeli-made equipment is “a legal target.”

The multiagency advisory said it was not known if the hackers had tried to penetrate deeper into breached networks. The access they did get enabled “more profound cyber physical effects on processes and equipment,” it said.

Hackers Affiliated With Revolutionary Guards

The advisory says the hackers, who call themselves “Cyber Av3ngers,” are affiliated with Iran’s Islamic Revolutionary Guards Corps, which the U.S. designated as a foreign terrorist organization in 2019. The group targeted the Unitronics devices at least since Nov. 22, it said.

An online search Saturday with the Shodan service identified more than 200 such internet-connected devices in the U.S. and more than 1,700 globally.

The advisory notes that Unitronics devices ship with a default password, a practice experts discourage as it makes them more vulnerable to hacking. Best practices call for devices to require a unique password to be created out of the box. It says the hackers likely accessed affected devices by “exploiting cybersecurity weaknesses, including poor password security and exposure to the internet.”

Experts say many water utilities have paid insufficient attention to cybersecurity.

In response to the Aliquippa hack, three Pennsylvania congressmen asked the U.S. Justice Department in a letter to investigate. Americans must know their drinking water and other basic infrastructure is safe from “nation-state adversaries and terrorist organizations,” U.S. Sens. John Fetterman and Bob Casey and U.S. Rep. Chris Deluzio said. Cyber Av3ngers claimed in an Oct. 30 social media post to have hacked 10 water treatment stations in Israel, though it is not clear if they shut down any equipment.

Since the beginning of the Israel-Hamas war, the group has expanded and accelerated targeting Israeli critical infrastructure, said Check Point’s Sergey Shykevich. Iran and Israel were engaged in low-level cyberconflict prior to the Oct. 7. Unitronics has not responded to the AP queries about the hacks.

The attack came less than a month after a federal appeals court decision prompted the EPA to rescind a rule that would have obliged U.S public water systems to include cybersecurity testing in their regular federally mandated audits. The rollback was triggered by a federal appeals court decision in a case brought by Missouri, Arkansas and Iowa, and joined by a water utility trade group.

The Biden administration has been trying to shore up cybersecurity of critical infrastructure — more than 80% of which is privately owned — and has imposed regulations on sectors including electric utilities, gas pipelines and nuclear facilities. But many experts complain that too many vital industries are permitted to self-regulate.

RELATED TOPICS:

DON'T MISS

Fresno Man Sentenced to 200 Years to Life for Double Homicide

DON'T MISS

River Park Farmers Market Nears Milestone: 7 Million Customers

DON'T MISS

Senate Passes Six-Month Funding Bill Hours Before Shutdown Deadline

DON'T MISS

Fresno County’s First Fentanyl Murder Trial Begins as Defense Challenges Overdose Evidence

DON'T MISS

Trump Pledges to ‘Expel Rogue Actors’ in Political Speech at Justice Department

DON'T MISS

Meet Tulare County’s New Health Officer: Dr. Asma Tariq

DON'T MISS

CA Regulator Mulls State Farm’s Request for 22% Home Insurance Hike

DON'T MISS

Karbassi Says It’s Not Worth Investigating ‘Rumors’ of Chavez Wrongdoing

DON'T MISS

Don’t Listen to Critics. SJ River Conservancy Is Doing Its Job

DON'T MISS

CA Borrows $3.4B to Cover Medi-Cal Budget Gap. Is Immigrant Coverage at Risk?

UP NEXT

Anti-Zionist Synagogue Breaks From Mainstream Jewish Stance

UP NEXT

US-Ukraine Deal Highlights Ukraine’s Wealth of Critical Minerals

UP NEXT

Ukraine Targets Moscow With Large-Scale Drone Attack

UP NEXT

Ontario Slaps 25% Tax Increase on Electricity Exports to US in Response to Trump’s Trade War

UP NEXT

More Than 30 Nations Will Participate in Paris Planning Talks for Ukraine

UP NEXT

Guatemala’s Volcano of Fire Erupts and Forces Evacuations

UP NEXT

Ex-Central Banker Mark Carney to Become Canada’s Next Prime Minister

UP NEXT

Israel Cuts off Electricity Supply to Gaza, Affecting a Desalination Plant Producing Drinking Water

UP NEXT

Tens of Thousands of Mexicans Rally With President to Celebrate US Decision to Delay Tariffs

UP NEXT

North Korea Unveils Nuclear-Powered Submarine for the First Time

Fresno County’s First Fentanyl Murder Trial Begins as Defense Challenges Overdose Evidence

2 hours ago

Trump Pledges to ‘Expel Rogue Actors’ in Political Speech at Justice Department

2 hours ago

Meet Tulare County’s New Health Officer: Dr. Asma Tariq

2 hours ago

CA Regulator Mulls State Farm’s Request for 22% Home Insurance Hike

3 hours ago

Karbassi Says It’s Not Worth Investigating ‘Rumors’ of Chavez Wrongdoing

4 hours ago

Don’t Listen to Critics. SJ River Conservancy Is Doing Its Job

5 hours ago

CA Borrows $3.4B to Cover Medi-Cal Budget Gap. Is Immigrant Coverage at Risk?

6 hours ago

Trump Administration’s Attacks on Higher Education Threaten US Global Dominance in Science

7 hours ago

Tulare Police Arrest Eight in Gang Suppression Operation

7 hours ago

Feds Drop Gun Charge Against Capitol Rioter Benjamin Martin

7 hours ago

Fresno Man Sentenced to 200 Years to Life for Double Homicide

A 28-year-old Fresno man was sentenced Friday to 200 years to life in state prison for a 2021 double murder, the Fresno County District Atto...

15 minutes ago

15 minutes ago

Fresno Man Sentenced to 200 Years to Life for Double Homicide

The River Park Farmers Market in Fresno is set to welcome its seven-millionth customer while expanding its community impact through food assistance programs, small business support, and a new educational cooking series. (River Park Farmers Market)
28 minutes ago

River Park Farmers Market Nears Milestone: 7 Million Customers

31 minutes ago

Senate Passes Six-Month Funding Bill Hours Before Shutdown Deadline

Cassidy Gonzalez (pictured), 24, faces Fresno County’s first fentanyl-related homicide trial, with prosecutors linking her to Jade Dreith’s, 41, fatal overdose and the defense questioning the evidence. (Fresno County Sheriff's Office)
2 hours ago

Fresno County’s First Fentanyl Murder Trial Begins as Defense Challenges Overdose Evidence

2 hours ago

Trump Pledges to ‘Expel Rogue Actors’ in Political Speech at Justice Department

2 hours ago

Meet Tulare County’s New Health Officer: Dr. Asma Tariq

3 hours ago

CA Regulator Mulls State Farm’s Request for 22% Home Insurance Hike

4 hours ago

Karbassi Says It’s Not Worth Investigating ‘Rumors’ of Chavez Wrongdoing

Help continue the work that gets you the news that matters most.

Search

Send this to a friend